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TSEtt^at. 

a&E«*ffi{K*#ff©f(jafcaic, »«*HK:MUiflE 10 

[8**312] WEStti^att. ffiEtiMH£flt;£&M©$ 
1 lcEtt©tt «igf„ 

[»*«3] ffiEEtt^at*. j)OEfffffic!}*fp«£tt 

L, 

KJMJU 20 
MEftSFSS^att. ttEftffiftH^ttlsffiEBlftcDft 

gf££ s i=»«-T5 r t z&mtTzmmm 1 !ck«© 

[111*314] gftEEttt^at*. flm©$|fflft&©$|3|. 

©x- * s s s »=E*-r* c t i-rsw *jg i ic 
*©*»*Hfcwr*«f«*Eis-r-Bciei*ai-r* 

*«fE*«jai«!ii#^©jga^^«ft^-r5r-^*Eit 

"f-3 EtgX 5^ y :/<»:. 

«*#*^©xav^«o^w* juii-r sac ihxt- y y 

WE*«««*#*Ofij3S**K:. &R«HC#Lj|MB 

«*««*#«©ft«f*»jS-raftar«^5 l y^ , t& 40 
*tf C t * 4MR t -T Sg&g^ffi. 

WE«r«s^r*7 r -i'*j:M(rE«*ojpjffljc:a-r 
* MEW waaaw'vo^&v^ttssR-r^-* «eb 

-r-sEttx^y yt, 

50 
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WE**»«*#»©?!iis&aK:, mmmmizKLmz 

[0 0 0 1] 
[0 0 0 2] 



[0 0 0 3] 

[0 0 0 4] *«««£©£ 3 &:RjHfc|fi*TfcSftfc 
[0 0 0 5] 

*E»*at. Eit^sdJEit-ra^-^saic. 

[0 0 0 6] m^6K:EttOl|(Fffi«aa^j£B. 1f«^ 
*ST*v— ^4Jj:^flM8©f!|fflK»-j-*flM8ai«*# 

<t. Ettx^yi/TEirrsx— flvffs«m 
#ft^©*ai^*©^8H6i|[air * jwixt 1 y yt, 
«««tt**#©w3t**K:, mmmmizttLmnmrn 

[0 0 0 7] 7 ClgtCitt^H, itfi^as 

■fc «**4*)e-j"*5 s -3'*«t«ffif«©jfijfflK:»-r* 
flfffiitttai^ojtav^iis^-r^-^sEitrsE 




3 

[0 0 0 8] mim 1 KlB*©««ffl3S«. W**6 

\ZL tt-f z> ««si«ai#^©x& v» * * tf- 9 £ la 

[0 0 0 9] 

JnLT#fg0J©#8fc£f2)Z!!T£<h. #:©.fc3l;:&S. fi. 
L#jH;i©iE*£«, lxfc*>©KI®j£-r*;: 

[ooio] -r&to-fe. i icflatiowssaasit 

^© H2 0*l3t»EWl 6) fc. Ett*a*« 

16) i, «*»«Mt**0*J3S*»K. ft*«Wfc» 

«, EI2©aj8AgB2 0) t^ii5i<!:S:#ttt5. 
[0 0 11] 01tt #fgB^£®fflbfcEMD(Electronic 
Music Distribution:m^ : i : ^SEff)->7.5 : -AS:UiBJ-r 
50T*5. £©->X^AT?:i— tftclflff ^tl^>a>T" 
>V/ (Content) ttt. If i^OfcC^Bl&ttSr^ 

EMD+r— f X-fe>^ 1 te. 3>f>^^nw^2, a 

— tf *-a* h »7-^ 5 sics&fflttK d &mm u 

>y y d /vr ^ 2 ts cttf-tf— fx A*-f ^ 3 ^<om& 

[00 12] zi>T->y7nrt-fy2\t. fJPMfrS 

Bf^roflMRSftlnLT, if- fx^o;H y 3 lci£{iT 

[0 0 13] if— IfX^DA-f ^3tt. mm<Dtr-7)l' 
*yhr7—i/* -1>?—*yb* £fc«:fiBfift 

if2frzmife2nrz3> : r>yizmte : £:ttLT. z.— tf 

*— A*-y r->7 — ? 5 Kj£{fT3. 
[0 0 14] :i— if*-A*y h? — £ 5tt. It- 
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\Z. =l— *f *— A* -y h "7-^ 5 *<E2lffl»K d £EMD 
If- fXt>^ 1^6A^-T*IR. EMD-tf-b*X-b>^ 

i \zm.m £n&. 

[0 0 15] 02H EMDif-b'X-O^ 10«tOi 
1 ltt, if-fX^n/\-'f^3!-?im«-SH©tt^^«^ 

T^. 3>y>y:? r n/x-l':5» r «f3ai 2tt. 3>^>y 
ya;H ^2 tcEiiffliiKd&jim-r^ttfel-. 
»E©«$g*«$&-r^>. ^fftSWagBl 3W:, a.— tf* 

— A^-y h^— & 5(Dzi>7->yaymm(Dmm^Tm 

fg€r, ^flMt^a-rSHft. JASRACUapanes 
e Society for Rights of Authors, Composers and Publ 
ishers:B#^*f£«1S£)K£fIt-&o i*-;U4 
SHMfflltKd«:teigbT45 0. 3>f>7^n;W 

^wasci2. sfctta.— ywaasi 8<s«^uT. s 

20 IIiKd£3>f>y/P/Hy2, Sfctta— tf* 
-A*7h7-i' 5«C«ie-ra. n.-ifffggKl 8 
li. zl— if*— A^>y h"7— ^ 5 ©a >^>'.y©*!Jffl© 

[0 0 16] EMDif— t*X-fe>^ l*6a>f>';^D 
A*-f^2iS«fctf:x~ *f*-A*u/ h7-i7 5 Sr^fig-r^. 
!/->— A* 5 1 (01 OtiltS) ^©> ea^ffl«Kd 
©^W^cMffl©^JfCOViT, BI3 7!)M0 6 Sr#S9('ltt 
30 BJJf£>. i3tt, 3>f>^yo;H3'2^3>f> , y 
©ti^^Bateb, zl— tf*— A^-y h7 — i7 5&mi&T 
l7&ia>^>iy©fiJffl«rF^^"r«>. 19 9 
8¥lflt-43^^, EMD-tf-k*X-tr>^ l*^-r*E2l 

fflfiKd, 3>5 : ->^7"DA''ry2^wr'2>sa2iffl®K 
[0017] ms<Dm\z^x, mMmmKdu. m<D 

ti, BfJtOtfry h»©a»T»S" a a a a a a a a" 
40 (^I^Wt^A-^a > l"C*SfiBi2lffl«KdW, 19 
98^1fllH^61998¥lfl31B STffi^ 
("T&to-S* 1 9 9 8*lfllB*61 9 9 8f lfl3 
l a coJSlfimcU— ^ 3 if A* ^ 

7iKcoH A + -v ; 3>lTS>^i2mfflaKd-tr0t-^ 

bbbbbbbb" Oi^tt^A-ya > 2 
52lffl«Kdtt. 1 9 9 8¥2fllB*6 1 9 9 8*2fl 

50 DA^ ^3*^— If A* y h7-^ 5 tcsa*-r^=3 
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>T>7$^tt53>f>7iKc oit. A'-->* 3 

>2T»SE^ttKdT«F#fl:£*iTV»*) TSl>. 
EH*fc, A— ^3>3Tft*ESIffl«|KdJ4. 19 9 8 
*3fl«J>fcttJBnraiT*r), /X-y 3 >4T**E3lffl 
ttKdtt, 1 9 9 8^4^4 J t^fflpIffiTa5 0. yx-s? 
3>5T'&3Ki£ffl»Kdte, 1 9 9 8^5fltl;fffl 

»JflnN6D. n-i ^3>6Tr»5E36ffl«Kdtt, 19 

[0 0 18] 3>T>y^D;H^2iiJ3>f>yofi 
tt^Ba^-rstc^s^, EMD-y-— h*X-fe>^ 1 ti. 3> 
7->yfa;^y2\Z. 1 9 9 8^1^*6 1 9 9 8$ 
6 R S-CWflj RTIIfc. A— >* 3 > l 75SA- V 3 > 6 09 

tt. 6-3©E2U!l«Kd*g«U Eftf*. 6 8ft<D 
E2ifflS8Kd£iBte-r£©«. 3>f>!yyD;Hy2 

[0 0 19] ]/->-A5 l**3>^>y©#ijffl£ 

-5 EMD-y— k*X-fe>* 1 it. b-->-A 

51t: > 1 9 98?lfl *61998*3£ Sf. mm 
~%tel3.r\—*?a > 1 7iS/t— 5? 3 > 3 S 3 :3©Ej£ 
ffl«Kd££tfiU l/->-A-5 1H, 300EIffliK 
d*gmu E«r*. 3fl#©EMffl»Kd£Etrr 
£©te. !/->- A5 1*. EMD-tf— h'Xt>^ 1 \z&Wi 
T?S&V>fc£-© b^fMzJ: 0 . n>5r>yofijffl*t^r 

«O*t*»(J5tJ6T«0, $&. EMD-y— t*X-fe> 

* 1 ^<Dmm<Dmm&{&< u n.— h -7- 

[0020] 1 9 9 8$ lfllB!)^ 1 9 9 8¥lfl3 
1 B©JBWtett. A-i;3>R$5ElffliKdft 
EMD-y— t'Xt>^ 1, 3>fWD/H^2, 
If^-A^y h>7-^ 5^J5S;^-SU->-A*5 lTMffl 

[0 0 2 1] 1 9 9 8*2fl 1 BiZjiifZ. EMD+h- h* 
X-fe>^ l ©Ei£fflSKd©3>^>y:/DA-fy2 < 
*5«fctf^->- A5 l^©2t{i£|g 4 TUS^-r •£>„ EMD+>- 
— t*Xir>^i{i > □>f>7^nAWy2 »c, 199 
8*2£*6 1 9 9 8*7 R*-nmm*imtti. A*-^3 < 
> 2 755A-S> a > 7 © 6 ^©EaUflftK d £i§« U 
3>T>yynA-f^2li 6^©E2!flI*Kd£S« 

fc&SSUB«Kd*Elt5. EMD-y— b'x-fe>^ l 
tt. U->— A*5 1 fc, 1 9 9 8*2/?*6 1 9 9 8*4 
*WJT>Tffifc/t-S?3 > 2 755/t->>3 > 4 T* 
*3-3©E2fcffl*KdSj!l«U l/y-A5 1tt. 3a 
©E3US*Kd*Sflru S«lWKE*LTlr>fcE«ffl 
*KdK±»#U «ffc&E3lfflttKdSE*r*. EM 
M-ex-b^lli. >*3>lT-*SEiMffl@K 5 
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[0 0 2 2] 1 9 9 8^2fllB*6 1 9 9 8¥2fl2 
8 HOJWIKJKtt, A- 5? 3 >2-C»4E2lfli»Kd*«. 
EMD-y— fX-fe^ 1, 3>5r>yyn/X-f ^2, o.- 
ifsfr-A*-;/ h 7-^7 5 *fltfiETS I/-/-A5 1 T'fflm 

10 [0 0 2 3] 1 9 9 8*3£ 1 H&fettS, EMD-y— t: 
X-fe>^ 10EiSlffil8KdOn>7 : ->U/7"D;N*')'^2. 

tjj:y:^->-A*5 i ^omm&m 5 Ttairrs. emd-st 

-t*X-b>^ 1 it. 3>f>7yDA , 'f^2 tC. 19 9 
8*3E*6 1 9 9 8*8£3;T*iJfflpTj|g&, A*-^ 3 
> 3 7i3lA-^ 3 > 8 © 6 ^©Eiiffl^K d £2HfU 
3>T>7yDA , -i'^2H 6a©E2tJ8«Kd£§<f 
U 3fflMKffit&LTV*;fcE2iffl«KdC±§£U Hr 
fcfcE2Sfli*K d SEtTr*. EMD-y— tfX -fe>^ 1 
fi. l/~>— A*5 1(C, 19 9 8*33*6 19 9 8*5 
20 ^ST, ?iJfflnT^A-^3>3 7I ( MA— >- 3 >5T* 
*3t)OE2Sffl*Kd*aiflrix. W>- A-5K1 3 0 
OEayB«Kd*S«b, S«MfcE*l,TH;fcE2lfli 
iKdl:±itL, *r£>&:E3Ufl*Kd£em-r.5. EM 

D-y— t*x-tr>^ 1 it. rt—z?a>i-z$>zmmm#K 

d*iJ:^-^3 >2 -c**E-3*ffl*K d $E 

[0024] 1 9 9 8*33 1 B*6 1 9 9 8*3/! 3 
1 BOJUMfctt. A-5?a>3"C»«E3lffl«Kd*», 
EMD-y-- fX-fe >^ 1 , 3>f>7/nA'-f^2, i- 
30 -y-'/Js-A^^ h "7-i; 5 S^fjSTS U->-A* 5 1 T'fiJffl 

[0 0 2 5] 1 9 9 8*4/! 1 BCMstt-S. EMD-y— tf 
X-fe>^ 1 ©Eilffl»Kd©n>5 L > < >'7'DA-l'y2 . 
*±tfI/->-A5 l^©jM«&0 6Tittl^-T-5. EMD-y- 

-fc*xir>^i«. a>x>i/yDA^y2ic 1 199 

8*4^*61998*9^ *TfUffl pltgf«c, A'-S? 3 
> 4 7S2/t- s? 3 > 9 CD 6 O ©Ei@lffl#K d £ jiff L . 

l. sfemKE*LT^jfcEaya«Kdfc±#£u »f 
0 fc&E3iffl«iK d^tets-r a. EMD-y— t*x-fe>^ 1 

tt, l/->-A*5 1 fc, 1 9 9 8*4^*6 1 9 9 8*6 
^ iT, fiJfflBltg^A-^3 >4 7J£A*—S? 3 >6 T-aS 
-2>3^>CDEMfflliKd£Mlab. I/->-A'5 1 »i. 30 
©EitfflliKd^Sff L, S«WKlE1tUT«rifcEaffl 
ttKdfc±«£U «rfcaE3lffl«IKdftEtt:1-*. EM 
D-y— fxir>^ lit. A-i?3>iT**Eaffl*K 
d. A-5?3>2T**E2lfflf|Kd. *±0fA-^ 3 
> 3 TS5EIffl«K d ^^WSSSet&rs. 
[0026] 19 9 8*4^10*61998*4^3 
3 0 H©flB|SJlctt. A—>* 3 >4T?**E2lfflftKd*f. 
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EMD-y— t*x-fe>^ i , lyT-yyzfun^ =l— 
if#-A*y h 5 £$t/&-r£ i/->-a* 5 i nmm 

[0 0 2 7] C1WJ;-5IC. &<bfrUtb!fccr)RCD%&m.mm 
Kd^@B^LT*5< utT, <gtCO.-if— #1, 2-5r£ 
£^fc<-fe>*-IC7^-feXLTV>ft<Tt>. — =1 

(CT £7-feX LT«*£«f3 E 
[0 0 2 8] W1S»E(B51 Hffix-^esa&l 5 

^5ft»&Sftfc. M&1INR. *5=ktfl&&#*r 10 

dg-r^. EMD-y-— t*x-fe>^ l. ny^yyyan^ 

fflSfSllgB l 7 te. 3>f>yyo;^y2. -y— fX 
/a/H^3, *5«fctf:i— tfjfr-A^y Yl — Z 5 ©3f 

^o*«t«ai-r*ffisBaE*3iiff-r-&. 

[0 0 2 9] Zi— IfesaSl 8«, OL— tfgg^-^^ 
OL— tfgfi^— X£&Sf§ 

fcttSE»s*B»-r-5«offla**ff-r<5. 3.— y-'*-A 20 
•y-'^sgp 1 8 ti, «*a««niBa>5j&»©«j£©i&s©»* 

y 5 ©Br£©«3gfc3Mrr*. 

[0 0 3 0] 07 izSta-tfStr-^^-ZOM 
tt, ;x— if*— A*y h?-^ 5 ©^SSSwSggiHW© 6 
4 tf-y r^"E>ft-5ID (Identification Data) £15^ 
U ^-©IDtC*fJt:LT (-T^fe^. -?-OID$r*-r-S>^gg 30 

sid) . ^rnvrntrnw^t^. ss^pitg^sdv em 

D-y— t*X-t>^ 1 &»1ft#tliT££>5]MF©11MR«£B 
a»5j&»©flMBtt. *fegf$K <09Att. «fr) . *fctt* 

- fx 7p;h y 3 ft £a> n-5*sf&©*fM». 

jfcKfcfLT. i— tftfS* 1 8 tt, fOlftSSSl/, 
SSSSSSnfcigtt. WSk, ^©->X^A©3>^ 

>^y**ijfflTirftv». 40 
[0031] =l— •fae^-^"?— xfc(3«*nfc»* 
$&Ji*«piiiij&*5a*©flf«tt. *©««««, **?ii6*»5 

a.— tfsj%— A^y h"7— ^ 5*^ n>T">^ 
©H*S&tt3lf-fti!©spJffl3&t5Il)Bft«[R©«»T* 
jSSnTlr>4i*. •t©'f©ft»ffla««nIffiT** 1* 

©ffigslS, EMDtr-— fXt>^ it, =l— y-'^-A^-y 

h^-^ 5 ©EMD-y— t*x-t>^ i KsesnTna^ 
a-r*. n.— yas^— xicsBs^nfcEMD-y-— 

t'7.-fe>^ 1 £8&tttf«pJ1|g*>g#©fl|*tt. ■€■©«» 50 
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EMDIt- t:X-t>^ 1 tlg^nl^TSS^S^S 
A*7h7-^5©iOiS**l/T. EMD-y— h'X-fe 
[0 0 3 2] Sfc. a.— yflPSWl 8tt. a— if*- A 

isfiWF«-*««i6*n, *©««s«ffi7 i -**3H»i 5 
Kttiau set, ^©sas <*-fs>$o t. :x- 

[0 0 3 3] R&St&ffi 1 9 tt. ^Mx-^Wag^ 1 5 

icio't, a.-- y^©«**jKiu. -^©js^*. m«fl 
»2oc«iets. j±j^sb2o«, n.— if. 3>T->y 
yn/H^2. ^.tuf-y— tfx^o^-r ^3^©m&. 

«JKT^*fiJJfl**&©&*saK:, H^-B-*^a©«ff 
tf*-A*y h7-f 5 ©MSfti&ttttSnfcR&flf 

ffifemm. *jj;rwsai*«-©iEatt (Tftt>*>, * 

[0 0 3 4] i8lt n>7 i >y^nn-r^2©«fil© 
fM^D-^St^S. rj>^>yy— A'3 1 

-.f#lP«3 2t«ie-rs. ^^-^V-i7{tiDgB3 2 

«. 3>-f>yy— a* 3 i*^««&snfcn>5 L >u/tc 

SB3 3t4, Cr*-^v-^fd-JP«3 2*»6«iiesnfc3 
>'7 L > > ^'<&, ATRAC2 (Adaptive Transform Acoustic Cod 
ing 2) (ffifll) «©*a"rffil6b. B«f#fl;fiS 3 4 

HSr^HfcSB3 4tt. S«ffi3 3T-ffiSt$nfen >5=- 

>ys. sLSc%5feSC3 5*»s{jw&sn&a»s* (« 
T. :®ai:*3>f>7iKcoiit?i) ibx. 
DES(Data Encryption Standard)ft <if ©ftillSBt^-Tj^; 

-cmmtis* : t<ni&%:*tt3.7zi>T-i-fti&w>3 sic 

[0 0 3 5] iLKX^ffi 35lt a >x>U/^K cot 
gB3 6tr«SS-r^>= «f<ffl:«3 6tt^ 3>y->y|iKc 

o ^EMD-y— t*xt>^ i a»&0M6£ftjfcEaya»K d 
©e«*-fe*3.7 , 3>'7 : ^ri6«B3 8tcm^-r^. 

[0 0 3 6] DES«. 5 6 h©#ii»£ffi^ ¥5^ 
©6 4 1 ^D>y ^tbT&a-f &S£-5g-#5$T'& 

*. DES©5aa«, ¥^CSr«^b, *WC«»T*» 

*m & *i«-r*»» (Mffiaffi) *»6ft 

DES©-r^T©7;U=f'JXAttiiB8StlT^S© 

t\ c^-ett. x-^it^gi5©s*Mft^a*fB¥icUi 

[0 0 3 7] *f. ¥X®6 4t:7Ht lfi3 2t'y 
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Tffi3 2e7hOL,SAAtU TfflC 3 2 fc? y hCDL. 

Lett, h, t$ns. 

[0 0 3 8] ±&3 2 h CD H, *5 J; tfTffi 3 2 If ^ 
hOL 0 £StC, £U:<Bi!l3* 1 6lfiH*0iiU t#^n 
jfc±ffi3 2 try h^)H ie 43J:^Ta3 2 fcfy KcOL ls ^ 

[0 0 3 9] #'J 3 7H 3>^>!yO*» 
*fjSLT, Ka^fl-*-fe^3.Tn>^fP)5Kffl5 3 8 tctii 

^^n^cw«. ^^^n>^>u/7 p p/\*-r^2oi>^it 

tC#t|&-r^ 0 fflSK|Effl3 9t4, EMD-y— fcfX-fe >^ 1 
^6IB3lffl»KdO«»S:SWS(D^3tSi'&, EMDU— 
t*Xir>^ 1 tffiSBKU If- fef^^o/W^ 

[0 0 4 0] »«»4, x-^£jfctt»»TSK91»fc:# 
^T£D> ^mLfc^x-^^S^A^^iMScTAry 

[0 0 4 1] Ay->iH»45<t«»*C!)W^tOViTBi 

ilTtUAt5B»T»5. Ar>aH»t Ay>i 

ffi mil) ft%\ii& : ¥mrz>z.£.ifim\s<* j\v^=jl 
mmzxij^nr^-^(Di\zy h^mtLfzt^, a 

[0 0 4 2] •*£^-*£g«Ufcg«#tt, W££ 
£ » £ o $ 6 gft £ n&x - ^ OA -/ ~> fg^ft^ $ 
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Ttt, MD4, MD5, SHA-lfcifrt^lifctt*. 
[0 0 4 3] JfcfcaBB«*#ICO^TttWrS. BS#ft 

ttizML, 'Amtmmz&ft* ^it\zmm~rzmt 

io BLTfesim »M«t#sti, i&iwmmz&'D 
»4, asMitsns. 

[0 0 4 4] aBWMP^O^-Cft^WttRSA (Rivest-Sh 
amir-Adleman) ffi*K:l99rrs. £t\ 2OC0 

iTS^n £r5£tf>£ 0 (p-1) £ (qM) <Z>fi/h&fgftL££t 

ora*-^ e£L&&m\zmr)tynz>mt. 1 

[0 0 4 5] &\Z. L*ttfr**HCtcH-rSeC!>*j£ifi 
20 7cd^r5R^^>o f&fc'S* d, e, *3<ktfL<0KU;itt* ed=l 
mod Lj&*J5£j£U d*4:i— ^ KOSBfcffiTjfttiT* 

CKDi^ n<te*^|ig||tsn, p.q.isJctfd^ 
»«*<!: Stt*. 

[0 0 4 6] is-sfxctt, 5pXM^s, s: (1) omit 

C=M"e mod n (1) 
[0 0 4 7] Bff#XCJ4, it (2) O^ST¥531iC. « 

M=C"d mod n (2) 

30 [0 0 4 8] mm\zmmtz>tf. RSAR»^T¥X*Bff^ 
safc«ai*43^T45 0, s: (3) ^it^^STS 

M=C"d=(M'e)'d=M'(ed) mod n (3) 
[0 0 4 9] «ffi«p£q*ftoT^£&S«. ^MUe 

a»«n*»««ttT»4. 4>BMBe^6fB««d»4»*T 

#f i- «^T"€rfeVi. Et±<OJ;<3l£, RSAfff^Tt4, St 

[0 0 5 0] Sfc, ^P^^COft!ltDMTS^«Rffl«l 
■jp^JC^^Tfe, ffi¥fCltt0J-r^o *fRffi^y"2=x'3+ax 

B<tnB^6nS»Hi*rSilt»4, 

it*. aftrSffl^T, «F#XCl*«fcVC2»4, ¥XM*^ 
6, 1>FJ^T^ (4) *5J:^S: (5) (BffiSTffttiSft 
50 §o 



( 7 ) 
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Cl=M+rnB (4) 
C2=rB (5) 
[0 0 5 1] P»^XCl*3«k^C2tt, ^ (6) CD^ST 5 ? 

M=Cl-nC2 (6) 
[0 0 5 2] «#T**>CDWU f&ffiKnfcWTSfcG)*: 

[0053] B9it *-e7yp;w^3©M©i 10 
3 >f >y yp;w y 2 *6«»snfc, WHUbsnx 

*E«U -fe^^7P>7 : '^J«gB4 4(c«^-r^o ffi . 
SKHEffi4 5tt, 3>T>^7n;H5 r 2*5a>f> 

jfc-fe* a>f>!y7D/Hy2t«SBSEU Sfc, =l 
— If*— 5^<7)lf-fc # xypAW^-tr* 
^T^>^^-coSff tC^it^, a.-if*-A^^ h^- 

SKBEB54 5 EMD^-fcfXir>^ 1 *><&B2£fl3*K 
d(Dftte*Stttttt*©K5fc£^ EMDIf— tfX"fe>^ 
1 tffiSBSIE-r*. 

[0 0 5 4] BlOlt 3. — if* — Ms^y bU — 9 5 <D 
m&L^'?7Uy9m-T:$>Z>o l/y-ASlH 30 

[0 0 5 5] iim«6 1 tt, *y 4&lfrLTV 

-tfxyDA-<y3, *fc»4EMD-y— 'e^-t>^ 1 ti 

ft U f?r5£<B*«£§{IU- ^fctt&m-r&o SAMCSecu 
re Application Module) 6 2 tt. If— fcfxynA-f^ 
3, *&JiEMD1f— tfX"fe>^ 1 tffiSBBEU, =3 >^ 

>y©H»#ftttt#b, ATRAC2#5tT#SU S 6 
(7)C7^-^V-^7^n>T>^[:jfAti)c IC (Integr 
ated Circuit) A-F-f >^-7i-X.6 4lt SAM 6 
2^^,c7){f^^^cD^tC^5EL, U~>-A5 1 Kg 
#Sn3fcIC#— F5 SfcffiaU IC*— H 5 536^ 

^<Dm^^m^<Dm^\z.^m.v, sam6 2 ^a^r^o 

[0 0 5 6] If-fcfxyP/Vf 5^3, SfcttEMDU— h? 
Xir>^ 1 iffiSBBEU Wft«L3£*fTU n>x-> 

i*OBr£<Z>^-^£E1S"rsSAM6 2«, ffiSBSE 50 



73, :&j:tf«#/ie#{btya-;i/7 4*5«ricsn 

A««*fflL»^»tt (»^>A-te) SWT*. 

[0 0 5 7] ffiSBE*^--;^ 1MU If-tfxyp 
AW^3, Sfc»aEMD1f-tfX"fe>^ 1 <hO*BSESE* 
SlftU f&gt'JSUT, -WKtemp (-fey>3> 
It) ^«^/^Kya-Jl/7 4CMf^o 
1^1-^7 211 If- bf^^D/W^3^5SfSb 

U BBtt^j.— ;U7 3 £fcteHDD(Hard DiskDrive) 5 

2tcm^-r*o lats^^rL— ;i/7 3«, wk&Wkm^y*. 

—)V7 2*fctt«^/*^b : e^3.-;i/7 4*^^*S* 

[0 0 5 8] U^Xm^it^^^-)l7 4\t. 
7F91, &S58£:x- y h9 2, 45j;tfflr*Mb:a.~y 
H9 3*>S*|j£Sft3. «ta-yh9 1lt HMHbS 

Ybn^y h 9 3 Kiti*-*"*. a»«*rL - y h9 2H 

Bffft^yh9 3*3 «fc tfEttre ^0.-^7 3tcm*-r 
fflf^b^. - y h 9 3 \t, ^^ntz^yj-y 

^«KcoS, WfK, «?¥^iiK s a v eTBg^bU 
HDDS 2 {CttJ*-r*o VUmt^^v h9 3H n>^> 

y«Kc oS:#3gfi&6 3\zm.m-rz>t%, 3>T>ym 

K c o Sr — NfISK temp TfflMHb"rS- 

[0 0 5 9] n>^>y*tt#U #3SU fifo££>^* 
-^T-^*ftlp-r*#3B«B6 3»±, «SBBE*y:i- 

;i^7 9^6«fiE*n*, fflSBSE^E^a.— ;i/7 5tt, SA 
M6 2tfi5BEU -WKt emp^^ya- 
;P7 6 IC/ti^-f^o S§tya-Jl/7 6H Ett^^j. 

— j]/ 7 3^e»ta**n, — p$ik t emptBt^b^n 
-^^e>?a--;u7 7{cttsti*r*a m^^^zL-)i7 7 a, 

HDD 5 2 ^ESStlfcd>-7 L >U/*3>5 i >!y«Kc o 
— ;i/7 8tt. g^^n/:3>f>7^, MtZATRAC2^c7) 

•>*-^v-^#»^^3.-;P7 



13 

JfAU Un-ys 3 {Z&jjLtzQ. H^i±&X tr-# 
[0 0 6 0] HDD 5 2 li, ^-fX/D/H ^3^6i 

*S£n£n>^>y£fBirr-5. mmznrzftTjx? 

>5^>y£IB®&U f?£t~ -Sl^n — ^5 3«, fBg*Pf£ 
SAM 6 6 , «±tJt#a»6 7*»6*ritSn*. 

IZZJ^t- >y&tZmV. m£.T2>. SAM6 6tt. SAM 

7tt. #»»6 3iHUtMB£WU ■*©K9Itt*I&-r 

-5. MDCMini Disk:ffi«) K 7-f 75 4 te, giS^nfcH 

^■a-jtiMDtc-y-- ex^D ;\*-r ^3 *^ e^^nfcn >^ 

[0 0 6 1] IC#-H5 5tt, l/->-;\*5 1 tC»»£ 

fc&l^>-A*5 1WAU ^STffflLTHfcl/->- 
/t5 1tAnt^Ttt«t««&. *r. n— IC 

*S>3.-;U7 3 CE*snT^itE3lffl«K d fc£©Br 
^©^-^SEflSS-B:*. ^-ira. *©ic*.- 

H 5 5 £#r£:&l/->-A*5 1 \zmmV> ^©l^->-A*5 
l£*gf£bT, EMD-y— t*X-fe>^ 1 ©n.— tf^Sggl 

8fc-e-o«ffctt^->— As i*s»ts. EMD-y— tfx 

■fe>* 1 oa.— ifflfaap l 8 tt. IC#- h* 5 5 !cfB1&£ 
tlT^tz^—? 1 ©ID 

ftSBBFE^i-^s o&itfEtet^a-^s lTi 

fflSsglEtv'i— ;i/8 0 tt, SAM6 2tffiS 
!g|E-r?.o EiS^v^a— J18 1 te. IC*— K'f >& — y 
i^X6 4$j)-LT, SAM6 2*^^$tafc7 ; — 
fBfgU IStgLit^— ^$-SAM6 2\zmtlT^>. 
[0 0 6 2] :x— if^-A^y h"7 — ^5© 

A5 1*5<ty:i/D-y5 3ll HI Ofc*Ufc#aa5 6 40 

3*j«fcv#3Bai56 7 t#KLfc«iries#r*. 

[0 0 6 3] a>r>'yStf L, 

0 1, tt*i5;a-*10 2. tt^S?a.-;H 0 3. 

a.— ;H 0 5*»Sfl|j££n-5. ffiSBffiti;a-;n 0 

1 tt. SAM 6 2 j£jtttSAM6 6 t«IBBb. — PtgK t 50 
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emp&I^ya-JH 0 2 tCW^T*. I§tya 
-M0 2I1. SAM 6 2i5»6flJA$tl. -P#»Ktem 
PT-H&^ft$nfczi>T->u/»Kc o$-B#g|K t em 
PTSfL, I^yi-JH 0 3(CiH*-r'5. 
>>i— JH 0 3tt, HDD 5 2fc|2gSnfc3>f>!y* 
3/f>78KcotS^L, #Itya-JH0 4l; 
ffl#-f£. i^^E^a.-;!/! 0 4tt, ^^tlfz^y^ 
>y£. HKATRAC2«*©#5tT?#3IU *V-* 

(*m ; E^a.-;n o 5»ctH*-ra. ^-^ttm 

[0 0 6 4] @12ll EMD-tJ— t*X-fe>^ 1. 3>-y- 

>y-/un^^2. ■»*— trx^nn-r ^3, ^j:^- 
tziyT-yy. m^it^tifzay^yymKc o, n& 

•7^ (fOillHil 3£#!lL-n&j$-r-5) (C&iSrt 
U $ 5 113 >f >7 A-f a 73 >f t la 

>^>^^d/\--i'^2©iebj# (^vmmizm 1 4 

JRlxTaJBT*) *#-LT. +i— t*XyDA*^^3tCjSI 

&tfm&\zu y^yyyun^ *f 2 ©tEBj»£#LT, 

EMD+i— h*X-fe>^ 1 tCjH(f-r-5. 
[0 0 6 5] t-fX7'D;Hy3(t SfILfc3>^ 

ft$tlfc3>f>7iKco. tf*S1t^, 

fXyDAV ma73>ft (-€-0 

— tfx y n aw y-t^ i z 3 >^tc-y— ex yn/N*-r 

^3©IEB^S (-€-©f¥aattH 1 6*#flgLT^-rs) 
-fX/nm ^3®IEBJS^#bT, EMD-y— tfx-tr 

y$ 1 iciii{iT«>. 

[0 0 6 6] i— »f3j?-A*y h tt, §{fLfc 

fcv^T, 3>f>s'»Kco!j«afan*i', K&fflrg 
ft*ft. «ia*«ft*fc**ji«ft*n. EMD-y— fxt 

[0 0 6 7] EMD-y— fx -fe>^ 1 H&1f$6:fccfctf 

*s^#**c«ffl»*t*aiu. sfeEMD-y— ex-t: 

>^1, 3>f>'77 , D/Hy2 < *5j;^-y--t*xyp 

/w ^ 3 -tn-pn©fijjt*»ta-r*. EMD-y— ex-t: > 




( 9 ) 



SB. Se^tcn.— y-'jf:— A*y h 1 ? — ? 5A^§{fLfe^ 

[0 0 6 8] 01311. 3>f>7/DAWyt+a7 
3>-r:J-£iiiBJrrS0T&£. n>r>!y^n/Hyt 
ta7:>fttl, 3>f>y9Kc oTBf-^-ftSnfc 10 

[0 0 6 9] 01411, a>T>^^DA-f if2<DUW 

m&mw?z>mT-$>2>. ^>^>yya/uy2omm 

□ / W y 2 left L#J 0 8EBJ«»a v« tc 

BE9J»©lr3&»!IH, a>T>'yyn/Hy2ffl«E n ' 

>T>77DA , -fyoaiaeKpcp, MtftCg&Sr-g' 
tJ. BEBJ3»©A— y 3 ^aE^n^T- 

«iW. 8E91»©*8MBIE. n>5 i >2/^'n;Wiy2©« 
ml, MW:3>f> , yya;H y©4>HB$iK p c pl:A 

y ^ z.m$t.&mmvT ttfc/\y is =Lm&* gzum 30 

[0 0 7 0] 01511, Ij-fXynA'-fyt^raTn 

tKdT^ftSnfc3>f >7»Kc o, H«£#$h 

y->i<it£. 1J— t*X:/D/\*-Yy3cD8:>^Ks s pT 40 

[0 0 7 1] 01611, -y— fX^DA'-f ¥3(DVEWm 

H, ttW»©/X— S?g>##. BBJSWU— t'X/DA 

fcTJI^UXA&.ttfA^*-;?. fSSE^CD^mJ. 1EBJI 
»©*3&J»I8. *-ex^D/wy3o*iii. -9— ex 

H, SEWS© A*— a >§•§•. BaE^^-y--t*7.7 , 'PA* 
•f ^3»C*#b*J0#tt*BEW«©ab#^. »£C/HH 50 
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jfc7\H<=f , JXk*iJ:tfA'5* — e&EA©«ffi. MBS 

^0/H^04iMftKp s ptCAy ViMSfc&ilfflLX 
4^MAr>aiS, SEEii<DlB«ftK s c aXBf 

[0 0 7 2] H17B. tiSfeflttg. fc<fctf& 

2*«wr*«ia*ft- (hi 7 (a) ) n, 3>f>y« 

*iJfflrt^S:^-r. Wz-t£* 017 (A) ©HOS^M 
H, ol— tfsfc— A*^ 5^-€-OI3>-t-> , >'^W 

[0 0 7 3] 01811, ->>^;i/zitf-43j;y:-7;^zi 
#1t$St't3^T3 tf—fFitfat-^A Stress n y=r>y 

-5. tfc'L, 018 (A) lC^T«t-5tC. nbf-SrMtC 

tf-n, «6fflWiS*fl i flMiK*v»Tatr-« : ir««#A.6 

— &f&£-r-6C£**'5. If— ©*£*>, 0 

18 (B) fcS-r±5K:. ntr-SHfcntr— rant 

[0 0 7 4] ^-t'X^P/Hy3ll, 017 (B) IZ 

(017 (A) ) tz«E«l!l«$ttlA«. 0 1 7 

(B) ©fl&feflMBtt. *©3>T->y*rS±bT»Jffl-r 
SttO^U 5 0RT. VJl'fntf- bXflJJBT-5 

££©fijflm&a*8 onTSSut^t. 0171: 
H, ->>^ntf— ©ffi«Ht?BH. n tf 

-©llsiafcOOfMMSU 0y*Jl, 3Isl©3e 

— ©WfflTH, ->>y;mtf-©ffiffl^©3^©i|sf^ 
nS3>f> , y(l, te/BWiE&fMtaic&^xritf-lf 

-5. 

[0 0 7 5] n.— tf^-A^-v h- 1 ?— ^ 5«. -y--tX 

©fijffl?mKc*jfflrte (01 7 (b) ) y*f 
iiKLfe, *jfflrt**w-rttfflffiFis*ffr«a (in 

(C) ) ^fSSr^. 017 (C) ©ffifflfffB 
[0076] 019 H, 01 7©0iJ<hl£!&LT=J>^> 



( 10 ) 
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- a x y a / u y 3 tfftttff «t«3s»s (om ® sin* 

•S. 01 7 (C^-T0iUc*f LT> Ell 9©0!lTH a >5=- 
> y f a A< y 2 ©fflaflt. n > > «/ $ S £ l, xmm 

iiananxn* (019 

(A) ) . jet, W3S»E««fclxT. It- ex^DA 
0RT\ ^?nfcf-LT^Jffl-r-S<h^3 ORTi65i 

<fc*«. iiananrn* <hi 9 (b) > . «#n H i 

5 1 3e-^4 0RiSnTU5. flite (MAIfl 5 0 
R) *»«&n>7 l >«/^'D/t-f^2 0*Jit («A«7 0 
R) fccktf+J— fxyD/H ^3(DfiJ^ (esj^.^6 0 
R) imX.\S.2 OR) EMD+f — fcf 

KDm&T&Z. EMDit- b*X-tr>^ 1 n 
— It**— hV-tr 5©3>-^>^OflJffl$£^ : $:^ 
■T»^«« (01 9 (C) ) tifelc, a.— !fjJ?-A* 

fx^DA'-r ^3 . i5«fctfEMD+)-— t*x-t>^ i ©-e-n 

tO 0 7 7] 02 011 n>5r>^©M^©flJffl{C, « 

^.ttWfiffllfie^fMllWSRWr-SHT?**. 02 0 

(A) ©Wctt. -9— tTxyD/W^3fc*»,>T. 13 
*$f-*5<fcOW&1g$li<i: Lt, n >7 L >y<DW±fflfQ\z* 
«IK©fcUB£. @ftfHR (C©#J©iSi=r, 5 0) 09* 
2>W±. *3«ktfJ8B«WI!B (d ©#!©*§£•. 1 9 9 8^1 

2^31 a st) o»«wffe*t»uesnT«ri*. a.— y 

5fBl<Z>m8.fflm.V>&Z>m£.$:miRLT, =l>7->y 

£LT^fcl,»:R|B-Ctt. 02 0 (B) fc*-r«fc5lC. i 
~»f#-A*y h >7-£ 5 ©^ttfg&ttflHROlElRin- 

KKttfc-rsttKMt. " 5- *tE»stiT^«. c©® 

»«0IEfc:S*i6r«ffl«. y-'*-A*-.y 5 is 

o (o \z*kt^\z" 2" tan*. E^jist^ 

[0 0 7 8] 02 ltt. EMD-y— t*X-k>^l, n>^ 

1f*-A*y h 5 OWT2|gfl| an*«ffi©fiilO 

0!l*Kfrr*BT<fc*. 01 2 fC^UfcWcttLT. 0 

□ A*^^-tr^ i y 3 >^{c^atl. J.— y**-A* 50 



18 



30 



yhv-? 5lzm.{Si<ti> EMD+I— t'Xir>^ 1 tcfcjg 
(tan*. tt&fMgiffitttt. JEfc, R^«4B«J:o(iRft 

^ift^lcn— if*-A*-.y h»7— £ 5^6EMDU— h' 

X-k>5> 1 teaman*. 

[0 0 7 9] 02 2tt. 02 l©0J©«^©-y— ex7" 

xya/N'-f ^-fe^^Trj>^^-«. 3>f>y|Kco 

fc3>T>yiKco, &&##h w&fflwmm. m& 

io UJ:V*«s^tf. 3>f>y8Kco 

[0 0 8 0] I2 3(t 0 2 l©«©«^fc*»t*. m. 

«^2r^-r01r**„ 0 2 3 CStMOiS^, n>5-> 
y7a/U?'2<Dl&&J3U (02 3 (A) ) «. -^COS 

#flBT**»sc$#b3a:n. -tcr, -y— tfxynA'-r 

■€-n(C«^1f^<£:^bT, 3.— tf*-A*y H7 — ^ 5 
tCMflT* (02 3 (B) ) . n— ifjfr-A*? 

3 (C) ) S-^JEj-r*. 02 3CDn>7->->'7 K Dy , C'i' : ^ 
2te. 01 2©«^-{citfeb. J:0/hSlr»x-^»fi!)lSl 
ft^tf*IBgTn«J:VifiM*«*s. 
[0 0 8 1] 02 4lt EMD-tf— h"Xt>^ 1 . n 

tf*-2»*y K , 7-^5CD^Tji§fian*n>^>!y 
BJ-r*0TS.* o 02 1 fC^tfc^JtC*fLT. 024© 



20 



40 



02 4©->XfA[t 02 1 ©0U©M§-&[;:i±!feLT. 
[0 0 8 2] 02 511 H2 40«©1^03>f>3' 

c oTBt^ftanfca>T-><>, iaiifflUKdT-iit^-ffc 

3ftfc3>f>S/«Kco. SBSIfflaKdT'Bir^-ft: an 
KcoT*fftSftft3>f>y. iaiiffl^KdTBf^ 

fcA " ->3-MSr, a >T>'77D/Hy2 ©«>&#K s 
[0 0 8 3] 02 6 H 0 2 4 ©09©«-&©-y— f X^ 




( 11 



19 

»#«\ EsiffljiiKdTBff^banfcwaMwww. be 

I2^ffl®KdTSt^b^nfc=i>5 : '>^Kc 

o, Basiffl*KdTie^fls3nfcaia*«-, nmmmK 

[0 0 8 4] m2 7H EMDit— tfXir>^ 1 3 > 
yam 5^2 tt, EMDit-t:X-fc:>^ 1 tr, n>^>y 

-ry^i^-^^ffi u EMD-y— tr^ir>^ ion> 

•r->^^ , PA^^«aai51 2 tt, P>r>7yn/H^ 
Igf-^^gllt^o EMDit-tfX1r>^ 1 cdp>^- 

T^o P>f>77 p P/H^2H 3>f>77P/H 30 
[0 0 8 5] U— tfxyp^-f ^3tt, EMD-y— tiX-tr 

>^ i t^-y-— exypA-r ^3co«w. p>?>yiD, 
^^stt^-y— ex^p/w^ae^-^ssim u em 

Dit- t:7,ir>^ Ifxyp/W yflfSffil 1 

a* if- txypA-f^BB^-^saw-rs. emdu- 

— t:Xir>^ 1 <OiJ— fX^P/W^aaBl 1 tt. it 

-txyp/H^iif-^^Sfiifctt, it-ex 

[0 0 8 6] !f#-A*y h»7-^ 5te, EMDit— 
tfxir>^ 1 Icpl— if<7>*fitu tfa>«f*PffiS-^& 
t'C55 s "-^^63te*n.--1f»»5 ? --^S3l«U, EMDit 

EMDit- fcf*-fe>* 1 ©a— tf fl?SSB l . 
8tt, 3.— ifSflk^— ^OSfifciO, P--1fID££/& 

1fID£P--1t**-A*>.y h 1 ?-^ S^SHif*. If 50 
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*-A*y h7-i7 5 tt, P--lfID£gff U EiSt* 
[0 0 8 7] 0 2 8te, fiJ£E#X~^-*<B0!l£« 

»rt>-rs*tspjffl#^<oE»**SB*snT^^. p>^> 

!yiD^*#rt?-r**Wffl#^©E»tt» =i 

t*ic»*-rs5pJJ6oE»<o»J^S*t". 
[0 0 8 8] 0 2 8t'^-rflME»x-^^-XCD^JtC 

tt. P >^>^P--1f iCWffl Sn« £ «fc*ffiilCD 
10%»^o Rlfllt, p>x>yiD**2T*£ 
p >"r>yiflzt—^\zmm^ti^ c t ic J;£*iJ&cd 2 0 
%WU *B5PJH#^E»Sn«i. 
[0 0 8 9] B29lt EMDit — tfXir >^ 1 OfiJ&5t 

ess i 6 a*istrr *n>f>7ofijffl om^-? 

— :/;H::tt. p >^>u/id^J:^p >t>7^pam ^ 
Z> 0 ffl9lr— SSffl-rsSBMOfflf* 

[0 0 9 0] 3>r>7yPA^WlT$^3>r 
>^^DA>fy2A««»r§3>f>!yiD*«lT*5a 
>^>!y©fiJJfl**&tt, 1 9 9 8^9^*5 1 9 9 8^ 

i2R^T*<Dffl. o. 0 2»j0 5i*ns. p>^>iyy 

0. 0 3ffJD5l*n^>o P>-T">U/> r P/W^ID^lT 
fe^P>x->^7 P P/\W^2*#tiS&-r^P>T->^ID^ 
l*fctt2£l^l! t *SZl>5 i >!y<D#l]ffl»&tt, 0. 0 1 
f'JO p >^>U/ 7"n ^ID^2TS^p > 
f>7yPA<y2«n P >-7 L >^/ID^3TS^> 
P>^>U/<Z>fUfl3**&tt* o. o swoons, it— 
tfXyP/^^ID^lTfe^>it— h*X/PAWy3^S 
« "T £ P > 7- > y I D A« 1 X & S P > x- > ^ CD f 'J ffl £f & 
te, 0. 0 3»J05i*tl5, it-t:XyP/NW^ID^2 

T»att-if^yp/t<y3^ji«-r*rj>7 1 >yiD«« 

4T$.^>P>^> N > r Of I Jffl*4^^^ 0. Olf'JO^I^tl 

[0 0 9 1] 0 3 Ott, EMDit-tfXir>^ i <£SE&gR 
^19^12^^, OL— tf|C»r*EMDit— tfX-t> 
^ 1 C0*iJffl»AS»tt1'*^-iffUffl»&^-^l'OWI 

P--iffiJffl^T— ^;K7>fl«HS» 
tt, 3.— if3&«EMDit-lfX-fe>^ 1 (rS^SfA^-SO 
5pjffl»&0«**-r. EMDit-t:X-tr>^ 1 

[0092] 030 \z^-r^--^nmn^-^ )^<dm 
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k&ht, nmm^mit. iooortjo, 1998 

¥8fl*6l 9 9 8¥9flC|H. £»£8fH 10% 

«D§ia»ns. sac, n>x>yofijffl»^*$«)fcfij 

flm#3 0 0 0 RGU:T?*S*£. 5 % 

3 > y- > y w n&tmm a n. 3 > ?■ > y ©f tug** 

f ijffl^r— ^;nc^iW$nTi/»*EMDiJ-— f x-t >^ 
ioniffl»**tinjssnT, ol— tfnmmn&tfi* w& 10 

[0 0 9 4] 03 111 EMD+f— h'Xir^ 1 a.— 

tfilBKLtR. ru— l 8 tt, -P3*k t e 

mp^rft^r-ftsL. A 1 4 OEMfflSiK d * d 

Kd^it^rfbbfc— B#®K t empTa^tlfcg, gB 
^•KdS&KKfclJTJBrr*. ##fl;Lfc 20 

SlWfcU EMD-y- lf^-fe>^llc2|fl|"r«. if 
1TSBB1 8«Cin$:gm-r-5„ a.— y'WSgBl 8tt. § 

K t empTtfftlfc^, iUffix-^aBB 1 5^^ 
l 9 fc2|«-r*. SlS^-^WSgB 1 5 tt 

tnRSt*«W*K*»*8S l 9 fij£#@38l5 
I6tt, fiJ^iE^v— ^-x. iJitftij^- 30 

0 5 7 TUiBJ-r-S&JlT. 3>f>-y^D/H^ 
2. -y— fX:7"DAf^3, fc^DEMDU— f7t>^ 

T*. fflttffi 2 012, H*tffeH.«©«fr«fca«u 
©*«#**itf, fn^ltStt, H&!S#gBl 9&J; 

tfo.— tfffa« l 8 icMft^n. ut»cDi— y osfifi 

[0 0 9 5] 03 2IJ, EMD-y- f X-fe l©flj&#- 

-So *J£flE*16tt. cnsoMstjst. n>5-> 
y^n/x<^2, -y- t'xyDrt<y3, fe^uEMD-y- 
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50 



«. -y-- fx ynA'-f y 3 mm<Dffim £-y- fx ro 

A-fy3 tCiiff-r-5. n>^> , .y:/n/\*-r ^ag|5i 2 
tt. n >f>77n/H ^2 OfiJiS©fia$a >?>y 
^n;wy2lcii(i-rSo Kffia5 2 1tt, i— y*-A 

[0 0 9 6] I3 3H EMD-y— fx-fe>^ 1 ©, 3 > 

&mwrz>m-c&z>. mw^-zmm^i sis. y 

1 3iJ.ktf*J£$HE«i 6(CiS{f-r-5o «£»E«1 6 

fc. b 5 7 -eiS^-rs^na-c. JASRACk:»r*»*&«s 
ftjwagsftfrrs. *fp*«a«i3tt, ^— y©a 

>5 L >U/OftfflH^f r JASRACJCjiifi-r-5„ 
[0 0 9 7] ^{C, EMD^X-r-AOfflgtcpViTlffiWr 
•5. 03 411 iOxXTAffl3>f>7Cgeffi*3cl;0! 

S 1 1 fC&t^T. EMD-y— fx-tr>^ 1 con ><r>yj 
uimrmmmi 2«, 3>y>ry^oy«-f^2KE2i 

#JHLT«arr5. xfv/s 1 2t*«f»T. y 1 

0fflk>-A'5 1) *»f^l/. 3.— tf^-A^u/ K^- 
f 5K>iggg£EMD-y— f X-fe>^ 1 (DJL— tfflfggp 1 8 

1r-hS#JHUT«ifir«. Xry/S 1 3 lC*lr»T, 
EMD-y— fx i: > ^ 1 ©3.-- !f«affi l 8 tt, rL— tf^ 
— A*yh"7-^5t, S3 7 75^13 3 9(C*LfcJ:5 

E2£ffl«Kd*3l«-r*. y-'^-A^-^ h"7- 
9 5tii(D»^§{f-r-5 0 04 8© 

[0 0 9 8] Xt7 7"S 1 4triJ^T. n>T->y^n 
A*-i'^2©-tr^a.Tn>5 : -^fi£gP3 8 -y— t'XT" 
n/N'-r ^3 fcn>^r>yyaA-i* yt+i7a>ft$ 

-H&#JHUT«ifif<5. Xfy7S 1 5fc*JV»T, 
- e7^D/H^3 Ot*a73 >f 4 4 K. 

!f*— A^y h"7 — ^ 5 ^6.©g*tjSi;T. 
h l 7-^4$r^L-T. n-if jJs-a* y h 7-^ 5 fc-y- 

(!#!3©P*fflte, i5 207D-5 1 t-h€#ILTt 
ifiT-S. Xr77"S 1 6t*3l»T. J.— tfjjx— A^y S 
9-^50^tya-;i,7 2H ^^a^ffr 
*. RftfliOffMg. B5 4C7D-^-hiifJ| 
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bTfitfzB-r*. 7f-^S 1 7K:45V»T. 3.— tftt. 3. 

[0099] 3>f>'y^aMy2*5, 

ft-*«F**fl:bT3l«-r*«^offlatt« 03 5cd:7p- 

EMD-y— tfx-fe i on >7->y7n m _i 

2H 3>f>7^aW ^2 £HE2UB«Kd£3Hrt 
a. XTVfS 2 2fc*V»-C. EMDU— tfX-fe>^ LO 10 

-y— fx^pA^f ^WffifiPi in it— fX^DA-f ^ 

3 75M7.T-y^"S 2 8<D«l31tt. 0 3 4 CDX^y 1 

[0100] 03 6H 03 4ffl^T5'^S 1 l&J;tf 
03 5 07fyys 2 1 KM*?"*. EMD-y— 
* 1 j&tn >T">>y y P A-T y 2 ^SBjUfflgtK d £i£{§ 
U 3>^>y:/om^2#;in*£«Taffl«<D# 

mztawrzya— ^v— h-e&a. ^f-^s 3 1 ic 20 

43V*T, EMD-y— t*X"fe>^ 1 ©fflSIBSESB 1 7H 3 
>5^>^y P AW y 2 OffiS^SE^ 3 9 t+BSSSSE-T 
H©ffiSBIE*fiS©lflHH H3 7fi#«ll/TffilS 

f 7 7S 3 2 tC&^T. 3>T>y^D/Hy20lSf 
<tgB3 4*.fctfWHMfc»3 6tt, EMM— fcTX-fc>* 1 
oa>f>y^DW yifSSBl 2#>£j£lf £n£:B3£t 
JBWKdSSfirT*. 7fy^S3 3tSWT, 
>^ypm^2©Bt#'(ta5 3 4«, gffibfcgEiifflft 30 

Kdsiaig-r-5. 

[0 10 1] Z\<D£?\Z. □>f>7^DA'f^2lt 
EMD-y— t*X-ir>^ l*»6E2lffl«IKdSSW15t*. W 

03 5 ICSt^D-ft- h<DjfflaSrfTP^J©« 
^, 3>f>yyo/Hy2^i:. -tf— fcfxypAW 
^3fc, H3 6 EMD-y— k*Xt>^ 1 

[0 10 2] ifctC, 12 3 6©Xf 'y^S 3 1 d&tta. 

gtCO^T, lO0«*fflV^ (03 7) , 2-D<D 40 

^aa^ffl^s (03 8) , &£zf-'j>fflmmf%&fn^z> 

(03 9) €:^Jt bTiffiBJ-r-5 = 

[0103] i3 7d it5®*a«T. *anst^t? 

&3DES£fflV>3. P>x>^yPA*-f ^2 WfflS^liE 
SB 3 9 tEMD-y— t*X-t>^ 1 WfflSISSiEgB 1 7 

:/S 4 1 Kfc^T, P>T" >y^D/H ^ 2 CDtBSsStE 
« 3.9 14, 6 4 tfy hcDSL®:R 1 5«T2> (SL&£/£ 
gB3 5 7&^B£TaJ;'5tCbT : bJ:Vi) . Xry^S4 2 
iC*5^T, □>f>i'7Pm y2©fflS^SESe3 9 50 



H DES£ffl^T£U&R 1 J f-«)g2t*bT^-5&a» 

KcTBt^flsfa (BtfJHfcffl 3 6 -crtf^k-ra £ 5 IC b 

Tt><kV>) . *xv7S4 3K*V»T. 3>T>'^a 
AW^2©fflSKffi6l5 3 9tl Bt#ft$nfca»R 1 & 

EMD-y— fxt>? i ©fflsistiEge 1 7 izmsirz. 

[0 10 4] Xr-yyS4 4K*^T. EMD-y— bf*"fe 
1 OffiSKKffi 1 7 H gffibfcSUScR 1 Sr^fefB 

V»T, EMD-y— t'X-fc>^ 1 ©tlSSgflglS 1711 3 2 
k'yh©aScR2$Mt§. Xf'V^S 4 6 K*SV» 
T. EMD-y-— brx-t>^ 1 rofflSiSSESCl 7H «#b 
fz6 4 f>> h<Z>SU&R 1WT&3 2 My h£fL&R2T 
Antx. »&R 1. II R2 5«t5. ^C*3, C^T" 
Ri.ll R i 0>±miv h£*b, AllBH AtB 

(nh'-yb©AOTftl- mtyhOBS^l/ 
T. (n+m) f-yhtlfct)©) £«T. Xr7^S 
4 7 l£*5V>T, EMD-y--k'7.-fe>^ 1 WffiSKSEgR 1 7 
H DESfc/BV»TR 1. y R 2 **a«KcT*^fl:-r 
*. 7f7^S4 8C*V»T. EMD-y— t'Xt^l© 
fflSISSEgf 1 7 H Bt^bbfcR 1. II R 2 £P 

[0 10 5] 7f»^S4 9i:^T. 3>f>^ya 
/Hi'2 0«IBK*3 9tt. §(fbfcRl« IIR2S 
£=a®KcT«^T£. Xf-^S 5 0IC*3V^T, P> 
5 : ->yyPA*-1':5> r 2 0ffl5fgfflEgE3 911. tt-^bfcR 1 
, II R2®±fi3 2f-yhRl.^. ^7^4 1 
T^fiJtbfc. a»R l®±fiC3 2 KyhRl. t-*"T 
nil EMD-y— t:X-fe>^ l^IE^i^-fe>^T'S-5>^t 
SBttt*. ±BKbfcSLScRl«t. SflLfcRl.*«- 

^. Xf7^S 5 1 IC^oV^T. 3>f>^^H^2 
©fflSBEa5 3 9tt. 3 2f-vhoaSR3&«t 

OffiSMEf3 9lt. SfSb, «#bfc3 2Kyh©a 

&R2^±&{cia^b, titi/fcaRRss^oTfiic 

fg^U Sf^R2 II R3 tf*. Xf7^S 5 3tCi5Vi 
T, 3>f>77D/H ^2©fflSIIIiE^3 9 tt. DES 
Srffl^Til^R 2 II R 3 Sr^aflKcT-R&^'ffc-ra. X 

1^1195 3 9 tt, st#fl:anfca«R 2 11 r 3 *ehd^— 

b'X-fe>^ 1 ©ffiSigliESiJI 7 IcSHtr^. 
[0 10 6] Xf'^S 5 5fc*SHT. EMD-y— k'X-fe 
>^ 1 ©^S^MgK 1 7 tt, S(Bbfc»*R 2 II R 3 £ 
#fflltKc-CWra. 7.7-V7S 5 6Ctl»T, EMD+)-. 
-fcfX-t>^ 1 OfflSBlia?! Ttt. «#bfc«»R 2 
II R 3(D±{4 3 2 tfy hSrS^ SLfcR 2 <h-Scf n 

BttEU -»bfettn«. ^FIE^ypA'-f^tbT, M 

[0107] 03 811 2 t3<Z5&a&K c 1 , K c 2 
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*jI»BS*§T&-5DES£ffll,>.5, 3 >r>y :/DA 
-f ^2©ffiS|g|Egl53 9 tEMD-y— h'Xir 1 ©*B5 

■r^2©fflS»aE«53 9te, 6 4hf.yKoa»RlS4 

X-r--;/;/s 6 2 t'iJUT, n >^->y 7n/H 
^2©*S5§g|iEgB3 9tt. DESSfflV»Ta»R 1 S^ft 

3t*snx, 3 >r >7^n;H ^ 2 CDffiSeSfli 3 9 

WF^tsnfcaftR i sEMD-y— t*x-t>^ 1 \zm 

[0 10 8] Xf?yS6 4(;l5UT, EMD-y— t*X-tr 
1 OftSSgtEgg 1 7 tt. ««Lfca»R 1 £^i£>fB 

*5^T. EMD-y— tfX-fc>^l©ttSBlE*l 7 tt, a 
&R 1 Sf6EtUTH4*ItKc 2T?«f^fl:-r«. 
Xt^^S 6 6fc*l»T, EMD+J— h*X-fe>^ 1 OffiS 
6 4fy K©a*R2S4)j6t4. Xt- 
yrS6 7k4$l»T. EMD+)— fc'x-fe>^ K75ffiS|g|iE 
8151 7 tt. a»R2ft#a«Kc 2-CflHf.ft-r*. X^r 
7 X"S 6 8 fctJUT. EMD-y— fX1r>^ 1 ©ffiagglE 

«i 7»4, #^fl:anfca«cRi*j:acaftR2szi> 

[0 10 9] X^y^S 6 9tc*3tiT. 3>f>^ya 
/W^2©ffi5B|H»3 9tt. S»L&aRRl*J.fcOt 
a^CR 2 *^a&BE*LTt»**a«K c 2 f«^T5. 
X5^:7S 7 OtC&t^T. 3>f>7yDyHy2©ffi 
SfgaiEgB3 9«. !6#U&a»cR 1 SB'*. xry/S 

6 i T££bfca*R i (i«^fl:-r*i»©a*R 1 > t 

— Sttl fcf, EMD-y— fc?X -fe > * 1 £• jgiEfc-fe > <!: U 

>y:/p/Wy2©«SBHiE«53 9 «. fHJLT»fca 
ftR2Sftffl|Kcn;(»fct«. ^fy7S7 2fc 
*5 «r»T, 3>r>yyDA-ry2 ©*ISBE« 3 9 fi, 

«F#ftsnfca*R 2 £EMD-y— t*x-tr>^ i ic^m-r 

[0 110] 7f7 7S 7 3fc*3HT, EMD+1— £X-fe 

> ^ 1 offiaeans 1 7 «. s«b)ta»:R 2 s^ait 

K c 1 r«^t5. Xf77S7 4 fciSHT. EMD-y— 4 
*«. XryyS6 6T4rtLfcaftR2 a*^fcT*j» 

[0 1 1 1] 0 3 9tt. aiUMNfc**, 160e? 

©*BSBIEgB3 9 tEMD-y— h*X-b>^ 1 ©fBSBEtf 
1 7-tO«HBiE©»f^*||iwra7n-5 1 -|.-h7rJ6 
X-7"-y 7S 8 1 K&HT, 3>f >77D/Hy2 5C 
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<D^WMW> 3 9 «. 6 4 k*-y h©a$CR 1 ££j£-r 
■5. Xr-yl/S 8 2 d&I^T, 3>f>7yaA-i , y2 
©ffi5KE«3 9tt. a«-e*©^WttKpc p**tt 

Mmm (.mm.mfrz^tbm.mLT&^fzbtD) t. asc 

R 1 SEMD-y— fXir>^ 1 ©ffiSB&flg l 7 Cilft-f 

[0 112] XT7^S8 3C43HT. EMD-y— fX-t 
^10«IBK»17lt SfiLfcEW*©** (gg 
ElOMiK s c aT?»§ftgftTH5) £. 
10 »LT*iH)fcBE»©&||fcKp c aT«fL, 3>f 
>y^"PA-f^2©4iHHtKp c pt3>f>7ynn 
-f^2©«m©Ay-> a «£lli 3 Hj-ri:£'bK:. 
{'¥:£©£ £&;W£ttTH.5n y^yy -Jun-i- y 2 © 

'^MiKpc P*5«tDCzi>T->>>'yPA*-l'y2©«Ha* 

si 0 tH-r. SEn««fBsj^«t»fT u&aiEfc t>©-r an 
«. iEw»©**stt^-r*c:t*«flHiT*t). 

T»S*ifc&HfcKpc p*±t)!D>f>yrD;wy 

2©«|6©Ay<>a.«tt. ¥X©**iEW»fc*i|ft*n 

TUfcn >f D A-f ^2 p c p&£tfi 

20 3>t>77d/H ^20MKAv>aBRSIIL 
Tt#e>n/tA2/->iM,t— ^tlfciO, 
Kpc pa*&fi£nfct>©T&^SlEfc%>©Ta.5£i: 

[0 113] ajE&BE*S*a»»&ft&££. 7f7? 
S8 4K*HT, EMD-y— t'X-fe>^l©ffiS|giEgBi 
7«. 6 4t> h©a*R 2 XT7?S8 

50 5ICfe^T. EMD-y— t*X-fe>^ 1 ©*gSSg|Eg|$ 1 7 
fi. a&R 1 &<fctfagcR 2 ©«g=R 1 II R 2 ££j£-r 
•S. Xj»; ?S 8 6 tC&t^T, EMDIf- t*Xir>5' 1 © 
ffiSaSliEgBl 7te. atgRl || R2 5g»@#©Igf 
K s e s c TflrefcT*. X^y ?S 8 7 C*HT. EM 
D-y— fc'Xt>^ 1 ©ffiSBijESB 1 7 «. 1SR 1 || R 
2^. Xf77S 8 3t®f Lt3>f>7yD/H^ 
2©&H*Kpc pTflHtffcT*. X^<>?S 8 8tC*5 
tlT - EMD-y— h*X-fe>^ l©ffiSB£EgBl 7tt. ft« 
8 R sesc 'WFfftStlftafeR 1 II R 2 , 'AfflmK 

0 p c pTW^fbStlfc^aiR 1 II R 2, &<fctfg#g# 

®^BB#Kpe s c zstsmwrn (.mmm^^iib^m 

353 9{Ci*fS-rS. 

[0 1 1 4] 8 9iC*5^T. 3>f>yy D 

/U V2 ©*SBE«3 9 tt, S«UfctEW»©#«* 
^^ftLT^S^fcBIEBO^BIttKp c aTttfU 

IELttn«iIigS^c ( ^§B»Kp e s c'S-SfOmr. d 
ffli^fflMKi. X5ryyS8 3»C4JtJ-**^ira*-c 
&-5©T, ^©IKBJfJ^iig-r?,,, Xf7yS9 0C^ 
T « ::l >7 : -> > >'?nA--l'y2©ffiSB|Eg|5 3 9tt. EMD 
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■9— ex-t>^ imm^Ks e s cx^mt^nx^ 

sa»RlllR2S, Xf^ys 8 9TBtf#L&2tfl8tt 
K p e s c TS^TS. y S 9 1 \Z&\,*X. zi > 

BBttKpc pTBt^bSnTl^a^R 1 II g 
»@W»scpr«§no XT^y^S 9 2{C 
i3V>T, 3>f>yyP/K^2®«SBK«l!3 9H 

xf^ys 9 ot*fsnti»R 1 n r 2 xf7 

ys 9 1 T«fStlfcl«R 1 II R 2 SJtttU -grT 
tifriEMDit— t:Xir>^ 1 * 31 IE LTBfiEU 

s. 

[0 115] BIE&Bffifc*#» Xf7^ 
S9 3tC*5^T, rJ>x>y:/DA>f ^2©ffiSBffiffi 
3 911 6 4Ky h<DaftR3££j«T3. 7>ry7S 
9 4\Zi5^X. a>f>7yP/H ^2COfflSKffiEffi3 

fca»R3CDlftR2 II R3$M«. XfyyS9 
5fci3VvT\ 3>f>7yPAW ^2©*BS»liE«3 9 
tt, R 2 II R 3 Xr^yS 8 9TBl»U&4iH 
»Kpesct«ft«o XryyS9 6l:45ViT, 
□ >f>^yP/H ^2fl!)ffiaBBEa5 3 9tt, fflHtftb 
3tI8R 2 II R 3 ^rEMDit- t:Xir>^ 1 OfflSBSEffi 

1 7K2nrr*. 

[0 116] Xr^ys 9 7 tC*3^T* EMDit— t^-fe 

>^ i coffisesffi nit #^ban&*»R 2 11 r 

3 *a4*e#©8HE«K s e s ctSW^. Xr;y 
7tt, Sf bfca»R2^ XfyyS8 4T4«Lfc 

a»R2 wwstt©a»R2) t-atftn 3 

>x >!Vyp A*< y 2 £jgjE&:/D AW ^£ LTBBE 
[0117] W±£>cfc -5 fC, EMDit- tXt>i? 1 COffi 

sbsebbi 7 h^>^>yfan^^2<D^mm^3 

<0ffl2BSEtClS< ffl3lc£tt*a&— »#«K tempt 

[0118] H4 0lt S3 4(DXf^ys 1 2*5j;tf 
0 3 5<D7>TyZfS 2 3(C*f^-T^>> U">-A* 5 1 *«M 

Dit-trxir>^ i ©J.— if «aa i 8fcs»-r**as 

^rIK0J-r^>^D-^^-hT*^o Xf7yS 1 0 lfc 
*S^T, W>-A5 1<£>SAM6 2te, IC#— F*f>^- 
^x— X 6 4©ttlW5, l/y-A5 1 \Z/*yt7Ty7 

n/^iJ-g- U->— A # 5 l3&^»ffc3a:U->-A5 1 

-A* 5 1 (C^I^O^tC, tl<£>1/v"-A5 lOf-? 
&rtvi7T v7m<DKX- K5 5 (CAy ^ y ^ ySi*T 



, zfy^si0 2i:i*, ic*-H5 5iz 

Z>fz&\Z\t, *<0«IC IC#-K5 5fc, 
5 s -^*f2S* J B:SiKS3&**S*^ -t^ffl-ffitt, 04 3 

[0 119] Xf7yS 10 1 IC&^T, AyJTyy 

10 ¥tt»4, Xf!yysi0 2SX*yyU TsTV? 
S 1 0 3 icittf. TsTyZfS 1 0 3fc*3V>T, SAM 6 2 
OfflSBIiE^^j.— ;W lte, EMDU— tfXir>^ 1 <D 
ffiSBKBBl 7 ifflSBEU SAM 6 2 tt, fiE9!«*EMD 

mmmm\t. 03 mmm3 9^#Mixpjbfc®^ 
tmmxfo&cox, zzxtemmzmm-rzo x^-y? 

S103T, SAM 6 2*<EMD1J— tfX"fe>^ 1 ^>3.— if W 
3«1 8K3l{rr*IE9I»tt, 04 1 tC^-Tx-^^:^ 
tt. SAM6 2#3Sflrr*BE91»tt. 0 1 4 iC^Tn >^ 

20 >ry^n/W^2(Offil8»tSSI^«o*fiK**'rs 

AjX^Z>o Xf^yS 1 0 4tZ*5l/^T, SAM 6 2 ft M 
fSffld l&ftlsX. -NpftKtempT»§ftl&, 

1 (Ed-lfgSSB 1 8 tC^Hf ?Z>o 
[0 12 0] Xf7yS 10 5 tC&^T, EMDIf— tfX 
■fc>^ lf*a«l 8»4, SftLfcSAM6 2 0ID 

£S(c, 0 7 {cSb&n.— • tfae-r-^^— X*tt5R"T 
-5c Xf^yS 10 6 \Z&^X, EMD1f-h:Xir>^ 1 
30 OOL— tf «3Sffi 1 8tt, §ffbfcID^Wr^>SAM6 2 0 



SAM 6 2©S»««aI1)BT**t3pJ3e*nfc»1 



Xr7 



a««T?**^5^**ijffi"r*. xf^ys 1 o 7\z%> 

^X. Sf5LfcID&Wr-5SAM6 2*^ aj|ISTli& 
too 

[0 12 1] Xf^ySlO 8tC*5ViT, EMD-y— fcf^ 
-tr>^ l CDJL-lfflfaaB 1 8HU MSrS^^^fTL,, S 

40 «LfciDsatca--*fa»-r-^'<-xe«sRL» &m 

UXh»t5, COSfiUXHt fi»Jx.«, 042 
fC^-T$li££WU «SOSAMCDIDfc*fJKUT, EMDIf- 
t*X-tr>^ 1 oa- tf 1 8*«a»&*B»bfc3&^5 

ZtAu/ v;x{i£:EMD1t— tf^-fe>^ 1 <Z)^®K s e s 
50 cTSl^LfcS^^eMSn^o 




29 

[0 12 2] mSS<DSm<DW\t. «ffi<3DH#CD6 4 t*y 
bfrZte&ld&^-f (B4 2m 16ii^T*-r)o 

!f«a«i 8***t*-r«iD*#-rs«s*aaLfcc: 

££:*U a&Jg»7^y©" 0" MDit-ex-tr> 

* i o a— »f«jiB5 i 8 *t»iB-r*iD*w-r*««c!)a 

[0 12 3] X^-^X!7^0MSB(Most Significant 

Bit) co ,( i" \t, a*r«iD**-rs^<otB« («*. 

5 1) ^^>f>7SKco^t^^:t^U 
X5=~ ^X:7^<£<MSBO" 0" \t. ttfcT&ld&mT 
Lfc«©iS* 5 3 >f >y||K c o 

a v eTB^ft$nfc3>f>!ytKc o$t)bX.^)^ 
7t-*X77 yo±tt*6 3 h B©" 

E2lffl«Kd-C i ligp^bSnfc3>7 L >^»Kc 
oSfcS*.*^^-^ X^-^X^^OLSBCLeas 
t Significant Bit)©" 1" tt, «EJKUfc«c[)«»3WE 

»«?-*ID£^rr5?(0«gfc, -PtiKtempT* 
[0 12 4] a>^^zy B >yy{/(D n o" ttfc-T 

■y— tfxir>^ l ©^l— if 1 8 <fciBSiima*Hi* 

T=&£>) CI ch^ryKTo a >5 r -f 5> 3 >7 5Zfifi n 0" (D 
^-&X7^tfte1%\Z" 0 0 0 0" icm^sn 

[0 12 5] X^y7S 1 0 9^43^T, EMDit-fcfX 
■fe>^ 1(D3.-Ifflf8«i 8*4, tSSBSEffil 7*>Sft 
ISSnfc— P#»K t empTMftbit, ftlf-Ai 4 
^6««Sn&E3^«Kd*lx->-/t5 1CDSAM6 2 
izmmT&o Xr^/S 1 1 Otd&^T, A 5 1 

©SAM6 2J4, %:mLtzmmmmKdZ-mmKt em 

[0 12 6] ^er^^S 1 1 1 fcfc^T, EMDif— t:X 
■fe>^10J.-lfflfa«i 8tt, -RiKtemptt 
^{b Lfcl»UXh6k>-A5 1 OSAM 6 2 KitfSlT 
£<> X^y^S 1 1 2lC*5^T, l/y-A5 10SAM6 

[0 12 7] 1 0 7tC&^T, S« L£ID£ 

=Tr*SAM6 2^\ «£a»T**£flj£;5nfc*&, £ 



( 16 > ^2 0 0 0- 1 2 3 0 8 4 

30 

^fictt, Xf7^S 1 1 4 Kit*, EMDit— t*Xir>^7 
1 O ifflfSffi l 8 »4. *r«a»£*fTU igUX 
KSffrSU Xry/S 1 0 9 [Ciltn 
[0 12 8] X^yl/S 1 0 6^fe^T, §{f L/rID£ 
WT^SAM6 2©a»*^plT*St^Snfc«'&. 

^r^rs 113 icjt^ EMD-y— trx-t>^ i ©o.- 

1fS3(Bl8»4, ISfg^IiUXh^L, 

y^Slll fCittTo 

[0 12 9] Z.<D<k?\Z. EMDit— fcf 

io xir>^ i tassns. 

[0 13 0] 3fc*C. ^TiJfflbWcl/y-A'SlO 
12*6^^0.-^7 3fcE*3tLfcE3l««|Kda:i:(Z)3f 
/£c05r-^£ic*- K55 tcf2«£tf 3M3©f¥*ffl£, 

S 1 2 1 iC&V>T, SAM 6 2 eDfflSBEE^v* ol — ;i, 7 1 

IC#— K5 S^ffiSBSE^EvzL — ^8 0 tftSSH 
"TS- £<Z>BSE#L31tt* H3 7 75SH3 9*#HBUTK 

^>o Xr^^S 1 2 2 fC&l^T, SAM6 2©&»fS£ri 
20 h9 2*4, A7*7y^«K i ctUffl^SnS 

SLS*£/$"r&. XfyyS12 3l:*liT, SAM 6 2 
0>«HHfca - ^ h 9 3 tt, EffrE^i-^7 3 fcE«S 
nririSSAMOIDS^, ffi#ffliKsave, 4oJ;tfHDD 

5 2CDID£, /WTy^iKl c*ffl^T«F#-ft;-r 

X-r-u/^S 1 2 4fC*5ViT, SAM 6 2 CD^^n 
^h9 3t4, EWW— hTX-t>^l<D»||jBKpe s c 
T;ty^77^»Ki cSHftt« (SAM6 2*4, EMD 

tfXir>^ 1 ^©IBCDKIiE«l31 (i3 9©Xfy^ 
S8 9) IZ&^T, EMDit— tfX-fe>^ 1 ©4>|IH»Kp 
30 e s c&Btf§LT^S) 0 Xfy^S 1 2 5 IC&^T, 
l*->-A5 10SAM6 2*4, IC#- K-f>^-7 x -X 

6 4£^LT, ffg^t:^n^:SAM(DID#^, fl&fiUHftK 
save, *3j:rfflDD5 2<DlV&lftzmmk£tliZrty 

y«K i c SIC*- K 5 5 CMU Ett*$?jL 

-;i^8 l KEttts-fr*. 

[0 13 1] K±6DJ;5t, SAM6 2©EtS^E> ? 3.-;i/ 

7 3 tCEtt.*n&SAM(Z>ID##, ffi#ffliK save, 
*5<J:mn)D5 2C0ID^4, n7^77^iKic^^T 
«F#YK*n, EMD*- trx-fe>^l©4^IW|Kpe s c 

40 Sffl^T»ffcSnt/V^7y^»K 1 c<h*(C. IC 
*-K5 SCOEtS^E^a-Jl/S 1 l:JB»Sft-5.' 
[0 13 2] ^*T«fflLT^tl/->-A5 lmm* 

— ^SrlC*- K 5 5 ^EttSitSMcofflacoflfyoDl^jW 
Sr. 04 4<3?7D-ft" hS#iUTKWtS Q X^ 
7/S13 ltC^^T, SAM 6 2CDffi£igBE^:vzL-^ 
7 111 IC*— K5 SOffiSBSE^^i— ;i/8 OtffiS 
BIEf 5. Xf7/S 1 3 2{C^liT, SAM 6 2 OHg^- 
h9 3^4, E« : E^3.-;P7 3l:E«SnT^ 
iO ^SAM(DID#^, SSffllKs ave. &£VWD52(D 




( 17 



ID*, EMDU— hTX-fe>* 1 (D'&MWIK p e s c 

TrnmbTZo xf^/s 1 3 3\z&^x, u^-ns 

1 COSAM 6 2 11, IC#— H-f — — X6 4£^M> 
T, Bff^tSnfcSAMOID##, «#ffl®Ksave, 
*3ctOWDD5 2<Z)IDS:IC#— K5 5 lCi*{f U Eftty 
^l-;1/8 1 fcEffitS-S:*. 

[0 13 3] 0 4 4tC^T5a31tCct 0, 04 3tC^Lfc 
EMDit- t:X~fe>^ i o^BBH 
Kp e s c ftffl^T«P^fcSnfcSAM(OID»#» 
iKsave, *3<fcUMDD 5 2 <Z)IDH IC#— H55© 10 

[0 13 4] ZL<D&o\Z. IC*-F5 5fCAy^7yy 
^tlfc^-^l 04 0©XT7/S 1 0 2C05Q ; 31T\ 
SrLV^Uv'- A* 5 1 tctt*ii*n^. 04 3 

liCtSliT, frl^W>— A 5 1<£>SAM6 2 ©ffiSBE 

^e^^-;i/7 in ic#-F5 s^ffiSBSE^E^i— ;p 

8 0 tffiSBaE-T*. £©BIE813H 

[0 13 5] 7sTV~fS 14 2 tC&lAT, SAM 6 2 H I 

8 lfcEtttSftfc, /V;J7y7«K i ctWftStl 

(SAM CO I D#^, ffi#fflltK s a v e , & £ tfHDD 5 2 O 

>^ 1 CQ^BIiiKp e s cTBS^^ntt^^^^T 
yy»Kic*»*tlit, XT7^S 1 4 3 fC45^T> 
SAM 6 2 0ffl5BlSE : £?a-Jl'7 1 H iifg{8 6 1 30 
LI, EMDIt— bfX-fe>^ KOfflSBKBBl 7 ttlKB 
BEt"*. £<OBE4ffl«H H3 7 7SMH3 9*#MBUT 

XT7^S 1 4 4£43^T\ SAM 6 2 H ilftSB6 

Eft* 5^— ;i>7 3(Df-^, &J;#EMDit-t:X-fe> 
^ 1 <04>BM!Kp e s c1?l|^tSnT^5A7*77 

ymK ics, emdu— ex-t>* i ©3.-if«aai 
8 K2!«-rs. 

[0 13 6] Xf77S 14 5 \Z&^T* EMDIt— t:X 40 
*fe>^ 1 (B^—lfWIW 1 8H SBlft/b?7y^ 
iK i c^g^gt«iKs e s cTSWo X 

1 4 6 IC^T* EMD+f— tlXir 1 ©a- 
1fWffi»18Jl Smbfc/try^Ty^-^S, Ay 
i7 777iKictSW, Xf7^S 1 4 7 fC*5^ 
T. EMDU— tf^-fc>^!O^L— IfSSffil 8H 
LfcA7?7y^S, fflSBBEBRl 7^6«*SS 
ftfc— W«K t empT, SflE, BWtT*. 7s*rv7 
S148IC^^T, EMD+h-t:X-fe>^ 1 On-lfSa 
B18I1 -P$BK t empT«F^bSnfc/1yj7 7 7 50 
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7f-^^, i/v—y\*5 l <£>iIffSB6 l tciilfT^o 
[0 1 3 7] XT7^S 1 4 9 tC&^T, l/y-A'5 1 

©III SB 6 1 H EMDIt- t:X-fe>^ 1 co^L-ifSSffl 
1 8*^S(I Lfcx— ^Sr, SAM 6 2 (CiMffU SAM 6 2 

H *©r-^S«§l/fc« 4 im^J^-)l7 3 ICE 
Xf7^S 1 5 OlC&^T. EMDU— bfX-fc 

>^ 1 <£>n-1f WaSP 1811 IC#— F 5 5 tCx-^ £ 

ftx-^—X (0 7) <0x— ^SSS^pJtwK^U 

[0 13 8] 210ck"5fC, SrLV>W>— 1 H IMj 
-H5 SOAy^Tv/^-^Stt^ato. 

[0139] 04 4tc^-rfiaaTA*^i7T^y$nfc-7 r 
-^tt*aar»'&offla*, 04 6tc^-r:7D-^~- 

hSffl^TKWTS, Xf7^S 1 6 1 IZ&^T. Mb 
V>W>— A5 10SAM6 2cotSSBtiE ;: E> f ^ fc - ^7 1 
H IC*— K5 SOffiSBijE^v 5 ^— ;P8 OtfflSBffiE 
T^c £<DBSEffl ! 3£*l 0 3 7 7I>M0 3 9Sr#RBLTBl 

-So Xt7^S 1 6 2 fCi5V*T» SAM 6 2 II IC#— H 
<>^7x-X64^lT, EMD-y— tfX-fe>^ 1 O 
4>BB«Kp e s c-CI*^t*tlT^S-a-Vilx->-;t5 1 
COE^va.-;U7 3£>^~^ <SAM<Z>ID#*t v «fip/H 
iKsave, 43«fcrXHDD5 2 <DID*S"TAu/ i^T y ^ 

[0 14 0] 7r7^S 16 3 \Z&^T, SAM 6 2 <DB 
SBIE^vj.— ;i/7 1H ffl{3ffl6 l^r^bT, EMDIt 
— tfX-fe>^ l©*BSBffiES5l 7 tffl2BffiETS. 

BMan 03 77^M03 9^m\^xmmvr^m^ 

S 1 6 4{C&V>T, SAM 6 2lt ilfIS&6 1 S^UT, E 
MDIt— tfXir>^ 1 C0i>g|gtKp e s ctfif^tSnt 
l/^ffifi^ya- ;i/7 3 COt^— EMDit — tiXir > 

^ i <d=l— tf *a« i 8 tcsntr*. 

[0141] X5^^ys 165 tC45liT, EMD^-tfX 

;U7 3®r-^SS»§#^8S8ftKs e s cl^t 
£o XT77S 1 6 6\Z&^T, EMDU— t:Xir>^ 1 
ifSffiffi 1 8 H 1^1^7^77/7-^ 
ffiSBBEBU 7^6MSftfc-»?BK temp 
T\ SflE, fflf^frSo X^7^S 1 6 7l£*5l>T, EM 
D1t-t:X-fe>^ lOO.— tf gaSP 1 811 -IWKt 
■ empT*fftSntrt7^7iyyf-^S» V*s—rt 
5 1 CDil{fSK6 1 Xzmt^f^o 

[0 14 2] Xf7^S16 8l:*^T t l/y-A5 1 
CDilff SB6 1 EMDIt— tfXir >^ 1 COZL-^f^m^ 

18^e§lflfc7-^$, SAM 6 2 izmmi>. SAM 6 2 
tt, *l:©r-^S«#l/fcfc £1**^3.-^7 3^ 
E«S**. Xf77S 1 6 9(C43V>T, EMDit-tfX 

■fe>^ ion— ifsaaBi sn ic^-K5 5t^x-^ 



p 
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[oi4 3] z\(D£o\z. m4 4(z^rmm^m^fzn 

vtr7y7<Dm<£. 04 6 K^TfflSfcJ: 0 . #fL^ 
->-/t 5 1 «. IC#- h* 5 5 CD A' yi7 7 y £ » 

[oi4 4] ^-abih, e»i**a*r*«^- 
. 04 oo^p^t-M^ga^j 10 

l->-A5 1 fcftRfs l/n-y 5 3 SEIIDH— tf 
1 04 7O7D-f t - H ' 

^TfflSS^frT*. X^-y^S l 8 l Kfc^T 
-A'5 1©SAM6 2*i > Eitj; a ^7 3fcfi|jSft 
fcag'JXHc. 3©ID$##iitJ'. X^y 

7S182 fc^T. L->-A*5 1 ©ttSBE^j- 
)V7 1 fi, EMD-y- fx-fc^ i ©fcSBUH! 7 
SigSEf^. £©BE*l3tt, 03 775S03 9£#j?g 

20 

[0 14 5] X^y7S 1 8 3t«HT. EMD+f— fc* x 
*>*l©i~tfWl«18tt. ^>-A5 1©ID (0 
4 1 IZ^TSme 2V>mwmiZ-e;£tlZ>SM6 2 ©ID) s 

#S»*^T***5a»* W £ U t^>-A5 l^g® 
Wltt^iWSS^^, X5^:/S 1 8 4fcJi 
*. U->-A5 1 ©SAM62te. EMD-y— fc'X-fe>* i 

s*m*K d o/t- j? 3 >. mm(Dm 5 4 { , 

T^EMD-y— fx-fe>^i©a.— tf^Sg|5l 8 K. E1ft 

x ^ ys j 8 5( ,^ 

t> EMD-y— fx-tr>*i©^— tffrggsi 8f4i gm 
bfcT— K4fl»ffi$*i3iu 042* 

^^-^5 31:1^1^7^, *i:OC>^ 40 
[0 14 6] 7t^S 1 8 EMDit-fX 

t>^oa-if Si g5 18(Ji i^v-nsi^n 
Ba^ffl#Kd«A'->; 3 >^ a ^ g ^ swsu Vi/ 

4i«JlSnt^ ^rSl8 7K:Jt*, 
51HI«WcSI^k HiWlMHiM^ 50 



34 



88i: *^ T - ^-^'5Kt E**S?a-;j,7 SIC 
fX-tr>*l©n.— (fflgi Si^Xf^S 1 8 7 

10 14 7] Xryysi8 6l:iHT. l/->-A*5 l 
*«#-r*E3lfflttK d ©A*-v-3 >^*«fOt»©Ttta 
^tWSStlfc**. Z?y7S 1 8 9fcJt*. EMD-y- 
-Wt^loa-tffiajigB, -&#«KdTBg 

1 9 0t^T. U->-/t5 1H. BjfrES^-,1,7 3 

-fX-ir>^l©n.— tfVSffii 8*67fyysi 8 

A*-^ 3 >Ot©t3e»f U Xry^S 1 9 1 izM& 

[0 14 8]^fyrsi9 1l:il> T . ^- A51 
©SAM6 2»i. 3eWb&a«U^h*#J|HU 

^Ta^tWjesnfc*^ X^ry^S 1 9 2»CJt*. 
l->-A5 1 1 1^3-^5 3 ttffiSSiEU. -««K t 
empSMti. COBWaiH, 03 7 75^03 9 
*#BgLT^Lfc«^c!:^T^^©T. CCT-ttia 

*. ^7?Sl94tiV> T< W5 3H. IBM 
[0 14 9] Xf7 7S18 3l:*^ T> L->-A5 1 
S 1 9 1 iZ&KT, VU-ys 3tfm®^e]T~$>Z£n 

3-^5 3 K. l^y-/\*5 l^LT, EMD-y— fX -fe 

>^itca^$n-s 0 

[0 15 1] 04 811 03 4©X^^y S 1 3KU3H 
T. EMD-y— fxir>* l^l/->_ A -5 j icjMf9LfcB2 

SWKd ^ I/~>-A*5 1 *tSttlR*«iao«MB*tt 
sjt-«.7D-^^- hT .^ So Xf77S2 0ll;^ 
T> L->-A*5 1 OffiSBEqES?a-;|,7 1 tt. EMD-y 
-^•fe>*10ft2BEaBl 7t*SBfiE-r*. C© 



Bffiffl«»4. 0 3 773,5103 9 fcMHLTKBLfc*!, 

5 2 0 2 fc*t»T. U->-A'5 1 ©SAM 6 2 tt. a«ffi 

6 U^LT. EMD-y— fX -b>^l© tftfaaui 
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8K:SEi5J*£2!«U EMD-tf— t:X-fe>^ l tf« 
1S518H SEW»£3frr*. Xr7yS 2 0 37i£ 
Xfy/S210H 04 7CDX5 : -u/yS 1 8 375MX 

f7^s 1 9 o hfflm<D&m-c$>2>o-c J tv>wtyi\t%M 

[0 15 2] COct^t', W>-A5 1H EMDU— fcf 
Xiz>^ i cool— tfffaffi 1 8^&BB3lffll*Kd*Stt 
ffitK W>-A5 10H^1f$S^EMD1t-t:Xir>^ 1 

[0 15 31&IC, l/'>-n5 1i:«EITSU3-^5 
3©iB3lffl*iKd©SttffiO«ia (0 4 2 [:^tXT- 
j^775^ 1/3-^5 3<DE2lffl<*KdG>SW"«0 

*tf^r-r*«ft*-ra«^) H4 9ic5*T:7P— 

^- hSffl^TKWrs. 7fy^S 2 2 1 fcft^T, 
W>— A* 5 1 ©fflSKIiE^y 3.-^7 1 fecttfUa— ^ 

[0 15 4] Xr^^S 2 2 2 tC&^T, A5 1 

\t, vis— a* 5 loaaift^vi— ;i/7 3 tctBts-rsss 

3£U W>-A5 KDEIft^J.— -H"7 3tClB«"r^>S 
RUX hfcl^-^S 3©x-***ttoTV>5£TOtS 
^fyyS 2 2 3tl*, W>-/15 1©E 

^5 3#a»*i5T»3*>g*>*«:rr*. XT7^S 

2 2 3l:i^T, 1/3-^5 3#a»^WTttfc^£« 
5£$n£:*£\ Xfy^S 2 2 4 Kit*, 1/3-^5 3 
<0SAM6 6tt, l/'>— A 5 1 <7)SAM6 2 (d, rtaKT£Ett 
*S?rL— ;i/icE1»UTV^iB3lffl«Kd (ft»t*H4 
90XT7/S 2 3 5TI/'>-/t5 l*SStfSt)TVi 

*) -on— s?a>45ckc«i*i»« («at*H5 4i:» 
rts-rsfflacox^y 337 t*a-r*«aa"t?E«b 

TViS) - S-BIIK t empTBfiff ftbT, iSffU 1/ 
y-A5 l£)SAM62te, BB2lffl«K d OA-^a >*3 

[0 15 5] Xfy^S 2 2 SlC&V^T, A*5 1 

D*-ext>^iofiSBiiaiii7t, fflseiE-r 

COiStBaate* H3 7 75MH3 9 *#RBbTBlM 

Xf7^S 2 2 6 d&^T, EMD1t-h*Xir>^ 1 <D=L 
— U*eSBBl8tt, 1 CDID^rSiC, :x— tfa 

ex—*'*— x£&ssu i/->-A5 latae^T* 
a^g^weu w>— as i ^ae^nTTH^^t 

Wj£aft&»&, Xf7^S 2 2 7 Kit*, l-v-AS 
lCDSAM62te, iiffg&6 1 ^LT, EMD-tf— tfX-fe >^ 
ion.-- tfffaffil 8K, -BfiKd-e»f<kb&. 12 

Hl^^rL— ;U7 3^8S1tUT^5iB3&ffl«Kd<DA-y 
a>, BR&Wffi. *3cfctfS»UXK HDD5 2KIB»U 
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T^fcffifiUSrih — ^5 3<Z>K^1taS:2lff 

Xfy^S 2 2 8l:m, EMD1t-t:X-fe>^ 
1 ©a- tf WSaS 1 8 tt, 

»&*«S«iaU» 04 2TUJHJLfc, 1/V-A5 
1 *^Sft Lfcii'JX hcoua-ys 3 (CH-TSSS 

[0 15 6] Xf7yS 2 2 9 75MX7"^yS 2 3 4 CO 
10 9BM\t. 0 4 7 CStXf y^S 1 8 6 7iMXf y 
19 1 (h^n^niWl=»T*^CDT% -tOKIHtt^BSt* 

[0 15 7] Xfy7S 2 3 4t^45^T, 1/V-A5 1 

5 3*«ae^^5^*t(i3eu, u3-ys3^aB^ 

njT^^tW^Snfc*^ Xf7^S 2 3 SiCil** 
l/n-^5 3(C, -BSttKdTW-^fcLfc. R&WWS 
ff^ir-v, *±«E3lfflttKdftSlfib, 1/3-^ 

20 SSfll/, tlWS. 7fy^S 2 3 6C6^ 

— ^5 3 COSAM 6 6 fat* rtR-r^EIB^^a.— ;HC(S« 

LTi^, U E3lffl«Kdfe«»ro;t 

[0 15 8] XT7^S 2 2 2{Ct5^T, A 5 1 

5 3©r- ^*<*oT^S:Vi<fc*iJ5esnfc«'&, Xf7 
:/S 2 3 7 £il*, B4 7 tC^Lfcl/a-^5 3©Ifi 
jfflaSHfrU Xf7^S 2 2 4fciltf. 
[0 15 9] 7s*ry7§ 2 2 3 iC&^T, ^5 3 

30 ^aS^FpJT»St ! PJ3£Snfcti'&, Xfy^S2 2 6 
lC*3V>T* w>— as i*<s»^T*st*US*n& 

43<fctf* Xry^S 2 3 4l:^T, 1/^-^5 

[0 16 0] R±(Ock < 5tC, l/->-/t5 1 lC«£Jlt"£ 
□ -^5 3H l/y-A5 1^lT, IB^fflliKd^ 

[0 16 1] ^CtC, 0 3 4 0X75/7S 1 4^/^-T 
3>^>^yn/\W^2^-tfxyDA^^3Cc 
40 3>^>^ypA-f ^Hr*^T3>^Sr2lfS"rsffl ; a 
05 0(D7 n— 3^ — hSrJB^TK9!T£. X^y 
:/S 2 5 1 l£*5^T* 3>f>^7D/Hy20'?^- 
^V-i7{^JtJPgP3 2tt, a>5 L >*y-!t-A*3 
abfcn>5 L >^tc, 3>t : *>u/7 f 'd;w^2 ^:^T0f 
^^t-^7-?^AL, JE»B«3 3tc««er*. 

Xf7/S 2 5 2l:^^T, 3>r>^ya/H^2© 
EE«»3 3tt. ^-7-^3&«#XSnfcr3>T->y 
*ATRAC2«©3f)60*SCTJE*U» «#{b«3 4K«*& 
f^o ^fy^S 2 5 3l:*W, a*«^BS3 5J±» 
50 D>f>^iKc otLTffl^«»aftS»tS*. 
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flSffl5 3 4fc#Me-r*. Xf7/S 2 5 4l;^ Tl 3> 
7->y^n/W^20l*^flsjB3 4tt, DESfc£©j9r]£ 

CO 1 6 2] X^u/^S 2 5 5fc*JHT. R»#ftS3 6 
fi. DESfct*©;^©^-?, i3 4fflXf^ysl 1 

*E2lffl«KdT=i>7 1 >yJtKc o*«f*-ffc-r<5. X 
ry7 p S2 5 6fcil»T, ^>r>y^a/U^2<D± 

IBigSB 3 7 * 5tt«snfclRa*«- a ->iK$c$;i 

"W^fcU Bl3fc*f J:3«c**S^j5£-ra. X:r 
y^S 2 5 7 tisViT. ri>'5 : ->^yp/\*-ry2co-tr+ 

Bt^$tlfcn>^>^l8Kc o. 'J->-ffiffig&3 7 
*»6«f&Sn*ISa^F«-. *«tat7ry^S2S6T4 
01 3fc*-r«t5&3>5 i >y^ 

[0 16 31 Xf7yS2 5 8t*VJT. ^>v->y? 
n/W^2 0«SBKi»3 9tt, -y--fxyDA^y3 
©*S2ISlIJ$4 5 t«IBit5. COSSffiattStt. 0 
3 7 7)513 9**J«LTKWl.fc*££|Sl«Ta*© 
■C, CIlT»4BiW*#«S-r*. ^ry7S 2 5 9t*H 

3 8*4. -y— t*x:/PA*^3lc. 3>f>yynm 
[0 16 4] «±©J:o(C, a>r>yyDA'fy2 
[0 16 5] 3>^>y|£Kc o t^iC^^if $@BM 
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^^7^>7-^-^miST^f&<^mm<Dmm^, 051© 

S^r;y7S2 7 40jBlB, 0 5 0 ©X^y :/S 2 5 

^©i«BJ«#BSTS. X?*:/S 2 7 5fc*jHT. =i> 
T>y7u/mr2a>#1Hbt&3 6\Z. 03 5©X:r,, 
yS2 l©ffia(C«tO. EMD-y— fXt^l^^iiSg 

ST. =»>^>y«KcoiiJ:WzI«>J->-E*aB3 7*» 

[0 16 6] Xfy?S2 7 6 fcfcvrt. uy^f-yyy 
n/Hy2fflt+ a73 >xtMa!3 8(i 8g^-fb£ 

«t W^fc * ttfcl&g^iBC A y (MliSc^jlffi LA y 
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U 02 5K*-r«fc3fc**£ft£/jB-r«. X^r^S 2 
7 7{Ci5V>T, 3>^> > 77 , 'DA*-r^2©-b^zi.7r2> 
3 8 tt, «f^fl:$nfc3>T->y. Rfr^fcS 

0 2 5Jr*r«t5tt3>5 l >y^nA 
-ry-fe+^7 3>-3r^-^fp fiE - r ^ o x^-^^S2 7 8*5 
i«7ry7S2 7 90fflltt. 85 0O7f»^S2 

5 8*3«t?>*x^->ys 2 5 sofflat-tn-enratUT* 

[0 16 7] d©«t^(c:. 3>f>7yDA'<y2IJ, 
[0 16 8] Jfcfc, 03 4OXf7yS 1 5 

a, -y— fxyp;Ky3*^y-A-5 lt-tf— fxy 

2 07D-?t-hSf| f jtR«t6. Xf7^S29 

i k*n»t. -y— tfxyDA*-r^3©«#fta54 2tt. 

3>^>y^n/W^2©-fe^73>^^iS«3 8 

;0^ng*nfc3>T>77DA''rma73>rt 

3>f>y^n/Uif2©ai|«Kpc 

8 3fc*^SJfflatRI«Tr*S©T. ^©t&BJfi# 

[0 16 9] X5r-^ys 2 9 2 t*5^T. -y--t:X:/P 
A*-!- ^3©fit^^gK4 2«, a>T>'>5 p D/H^2© 
t*a7n>f^*»3 8^SMffi$tirc3>^>U/ 
rP/f-f ma73>ft©i«^3>f>y7DA* 
-f^20«Kpc P Tg^U »6nft/\y'/at 

P A*< yt*a73>rt©i!l!S!)% HCi ^ffiig-T 
[0 17 0] =i>5 l >yrn/X-fy-lr+ a .7'3>5 i ^-|c 

sfc*a%n»£-, xt7/s 2 9 3fctsv»T. -y--t'x 

:/PA*^3©ffitt«-gB 4 2tt. =i>r->yya/uy 

t+a.73>f«^W^t)ait„ XT7ys 
2 9 4fciJlr»T. U— k'XyPA*-ry3©ffi#^a54 2 

Xt7 7S 2 9 5 fC&tiT. -y--fc:X:/PA*-f y 
3©-fc*aT3>5r^j«aJ4 4tt. «NWfcS*ifc 3 > 

fc3/f/7lKco, 3*&5f«\ fcitHHMWRfcA 

©ft**Ks s pTWWffcU #S*lfc«£*6£LT 

01 SiC^-rJc^^-y— tfX7D/H^t + a73>r 

[0171] xf7 7s 2 9 6tctj^T. -y— ex^D 
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A-f ^3©ffiS^|EgU4 5\t. Vis— A 5 1 ©fBSfgll 

7 755^13 9$r#B3LTUJBjbfc:*^i|lltlTS^cD 
T\ ^CT"«iaBJ^#Bgr^o X^-y^S 2 9 1\Z^ 
T, t-f7^D/Hy3 ©•fe*o.73>^y-fN£g&4 
4te. U->-A*5 1 <E>iIffgE6 1 fC, UBJ»^#L>c-y- 
-ex:/PA<yi:*:x7:3>^y-£i*<f U $agi£jf$ 

[0172] -y— ex^PA-ryste. u 

[0173] -nyj-yvzrun^ ?z ic&ut, mws 
^m^mnKdX'mmt^n, -y— fxypA* 
-r^3*i^$ijffliti^^f^fig-r^)«sj©*^©, -y— ex 
^DA*-r^3^i/->-A*5 1 fc-y— tfxyDAW^-fe^ 

3.TU>^y-$rj§^t-r-5^S©paB$:. 053O7P- 
— b&m^Tm.WT2>o y\7-yfS3 1 1 & JctfX 
y^yys 3 1 2<05!iatt > 13 5 2CXfyys 2 9 1*3 
i^Xf-y^S 2 9 2©M3£^n^*nf^*rc l &-5G9 
T?> -ecDmH^tt^BS-r^. X^-y^S 3 1 3{C*3^T, 

pa-t y-fe+a.73>-T-y-{c-&^n^B&^t:$nfc^s 
xf^ys 3 i 4fc*3iiT, -y— ex 

yPA<^3co<S#ttSP4 2«. li&^ff^«iC. 02 
3TiffiBJLfc^&$iJfflH*f6^^-r^>. Xf7yS31 
5^MXr7/S3 180ffllH S5 2CDX^->yys 
2 9 4 43J:ZJC^^-. 7 ys 2 9 7 ©MS t^n^tllHUlT 

[0174] c©j;5tc. -y— ex:/PA-<^3 v 
->-A5 i irBt^b^nfc^a^^ti-y— exyp 

[0 17 5] 03 4(DX^-yyS 1 6 \Zttfc-f*> jSjE 

fc-u— ex y a a-t ^-t * ^ 7 3 > ^-y-SrSfi l 
i^— as icom<&mm<Dmffl&. 05 4©7p- 

ft-hSJBHTKWT*. Xfy/S 3 3 1 fcfcvs 
T. l/->-A* 5 1 Oa^/tffttya-;!/ 7 4 It. £ 

ft^tWJESnfc*^. Xt7 7'S 3 3 2-C. U->-A 
St^tU Xf77"S 3 3 3fCjfttr„ X^-^yS3 3 1 

3 n&«£\ ^tttt. Xf7 7 , S 3 3 2$7 

^y^U Xt77"S 3 3 3 \ZMtS. Xf7yS3 3 3 
(Cfc^T. l/->-n5 1C|^7h9 1li 034 
GDX^-;/:7"S 1 3©4B3K:.fc0. 3 IC 

i2te£ft-0>5E2!ffl»KciT?. 3 >^>ymK c o £ 

[0 17 6] Xf77"S 3 3 4l;*^T. l/y-A5 1 
©gg&SttS^rv'a.— ;U7 2 te, -t)--t:X7"p;Hyt+ 
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HiU 81 9 43«tO:ia2 0TBiMUfcS!IA««*jJ:l/:fi6 
fflUPKftfritWSSriEr*. Xf7^S 3 3 5 iC*^ 
T, l/->-A*5 1 OR^fflltya-^? 2 «. IBt&t 
S>j.-;i/7 3 tC|BttbTUS^1f$g*3 c ku:XT--y^'S 

3 3 4T^ffi$nfc^tf$S^S. £tt©«&a*SI&© 

RHtt±T?**tW3£*nfc«^. Xf7 7S 3 3 6 Kit 
U->-A5 l«H4 8T?l(iWUfcE2lffl«Kd©g 

X^y^S 3 3 7tCittJ„ X^yZfS 3 3 5 tC^T. 
Xf7yS3 3 6im77'Sn i Xf7^S 3 3 7l: 

atty. 

[0 17 7] X^y^S 3 3 7 ICiSUT. l^->-A*5 1 
©«*ai3ffi*^3.— ;P7 2te, ffitt^^o.— 3 ICR 
^f»$S^IBtg$-&^>. X^^^S 3 3 8fC*5ViT, 
-A5 l©«&*lJHE5?a-;U7 2 it, XT7/S3 3 

4 ICT£l«Lfctt;imi6ftfMIMg«n>D5 2 tcE^f 
20 So Xf77"S 3 3 9{3*3ViT> A* 5 1 ©SAM 6 

2li, HDD5 2 (C-y— tX7"D/H yn^F^T ny^-J- 

[0 1 7 8] Xr77"S 3 4 0IC*J^T. U~>- A 5 1 

Ay ->o.|Wg:£iIffl LA y X^r-y 7" 

5 3 4 1 (CiSI^T. U->-A5 1 OfatS^Ev'a.— ;P7 3 
«. tt/BM=I6*fl i «*©AyS':i.*£|BlftT*. IBIfc^ 
v>:i-,U>7 3 lZ&&mmK s a v etffBlgSnTHfc:^ 
So". Xx7 3 4 2 tCiJ^T, US'— A*5 1 ©SL& 

30 ^tar 7 h 9 2 tt, §#fflf K save TS-5a»i£ 
f££U XT7 7S 3 4 3fCiItJ\, 3 
{C«#ffliiiKs a v e?J*fB1g£nT^-5*§-&. X^y 7" 
S 3 4 2 teX *l, X^y 3 4 3 tCiitf. 

[0 1 7 9] Xt7 7"S 3 4 3fCi5V>T. [/•/-/« 1 
©R£-S§"fb JL- y h 9 3 3>f>7iKco^#ffl 
«Ks aveTlttfttS. Xf 7 7°S 3 4 4I;*3^ 
T. A*5 1«SAM6 2«. Bf^{b$nfcn>5^> 

^ISKc o£HDD5 2 »C|E»S-&«. sBtS^vn.-;!/ 7 
3 (C^#ffl^K s a v emi^tlT^U^m^. Xr 

40 77S3 4 5{C*5^T. U->-A5 KD'^/^mt^ 
7 4 fj. iS??fflitK save SEIt^^a.— ;p 

7 3KiEita-a:. 5as«^7-r-5. fBtS^v^.-^? 3 

lZ&&m%tK save ^IBlg$nT^-5^-&. X^y ^ 

s 3 4 stix^yy^n. 5as^7-rs<, 

[0 18 0] WiW^ptC. U-->-A5 ltt. IS#«$g 

Kc o$:gBMffliiKdTa^L. WflE, 3>^>u/«K 
c o &&??mmK. save T'B&^fkb, HDD 5 2 (CfB^ 
^1?ffl®K saved EtS^S? jl— ;i/ 731; 

so Etssns. 
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[0 18 1] U'n-irs 3 fe. H«©«!ST. s$#1f$g 
£SAM6 GPKDsm^iS^-Mzmm-tZtmz. 3> 

>yttKc o£{£??ffli£Ks aveTBg-^-ftU HDD 5 
2 tCl5g*£#3„ &#fflttK s a v e tt. SAM 6 6 ft© 

[0 18 2] I3 4«Xr^ys 1 7 l^->- 
A*5 l*«3>5r>yss^bf «ffla©»|B*, 05 5© 
7D-ft-het>TIlt5. ^rs»yS3 6 1l: 
£^T, l/->-A5 l<D^/^mt^i>^-)V7 4 10 
tt. HDD5 2*»6. 05 4 0Xf2//S 3 3 8T'fB1SU 
JfcftffllWMfcttflrafcitfXT-y^S 3 4 4Tf2tgbfc 

#^fls$tifc3>7->yiiKc o*»*ar. 

5 3 6 2 fC&HT. U->— A* 5 1 toGm/V&mt^'Ja- 

[0 18 3] Xfy7S3 6 3l;t5HT, p->-A*5 1 
©a^/St^^^i-;i,7 4 14. Xf'^S 3 6 2 fC 
*3^T^ta$nfeAy->iM**, i5 4©Xf'^S 3 

4 0TEtt=t3>a.-;P7 3 Cfi*3n&Ay>aIi- 20 

a-r*a»5*»e*!i3Sb, x^-y^s 3 6 2{c*3v»T*ai 
snfc/Ny ->3.®di, iatg^evj.— jp7 3tjaigsnfc 

6 4icit*., ®ffl0&©M&£©<£fflf^&#1#$8f;:-g- 
*n-5f9r/£©1f?6£M§T-r-So X^>y^S 3 6 5t*S^ 
T. U~>- A*5 l(Dm.n/^mt^a.-)V7 4(4. H 

iOSrScm-r-S. X^y^S 3 6 6 fcisHT, lx->-/\' 

5 l©EtttfE5?3.— ;U73tt, Xry 3 6 5 T#fcti 

7S 3 6 7 iC&HT, U->— A*5 1 ©^/Rg-Jf-fbtv' 
a-;U7 4tt, HDD 5 2 IC£a^£ttfflftK«#{|HB£ 

CO 1 8 4] ^fy7S 3 6 8JC*5V^T. SAM6 2 ©ffl 
5BK€j;a-A,7 1 £#3B«6 3 ©ffiSBffi^a.- 
^7 5(4. ffiSBSEU SAM 6 2 *SJ;tfflJ3S8B 6 3(4. 
— B$^K t empSrfBtftT-5. £©ISIiE#l3(4. 0 3 7 
75M0 3 9 S#J»UTKWbfc«££R|*T»S©T. 

1> R2. *&»4R3«». -WKtempibTflls 40 
S*l<5. Xf7 7S 3 6 9t*^T, tH»/«F«fl:^3? 
a-^7 4C«^a- 7 h9i(t 05 40^f7yS 
3 4 4 fwTHDD5 2 teflB*snfc=l >5=->2/tiK c o 
*. IBtttS?^.-^? 3 KlE*S;hfcfiHMi*K s a v 
7f7 7S 3 7 0l;*HT, ffi^/ft&^ 

3>f>y|Kc o§r— P#ftK t empTfBS^fr*. 
XT7/S3 7 llCii^T, SAM6 2(4. — R#fi§K t e 
mpntffc4ftft3>f>'>tKc o^#3Sg|5 6 3fc 
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[0 18 5] XJ-yfS 3 7 2lc43^T. {$£5356 3© 
tt^^a-JU 7 6 (4. n >f->ymK c o £-B#«K 
t empTl^n, 3 7 3(C:fclAT. SAM 

6 2(4. HDD5 2 fcESSttfcrj >^>yfcl«*aiU 
f$3fig&6 31CMOT-5. X5r-;,:/S 3 7 4 fciJUT. # 
»*6 3©(t^J?i— ;P7 7tt. 3>f>7^>f 
>ytKcomn. 7fyrS3 7 5tiHT. 
#3SSK6 3©#3gqE5^a.— ;|/7 8tt. &^£ftfcn>-T- 
>yfiATRAC2&i*OBB£®*ST#ar*. Xf7 7"S 
3 7 6(C*3^T. #31815 6 3©9^--^-7-i7#j!)i]^v7 
i-Jl/7 9(4. #5S$tlfc3>5 : ->^fCl/~>-A*5 IS: 

3 7 7(C*3ViT, U->-M*5 1(4. H*-&JbX fcT-*fc 
£KS£3tlfc=i>5r>ySHi*jU ffl«ft=J*7t-*. 
[0 18 6] Xt-^S 3 6 3tC*5^T. Xf-^S 3 

6 2l;t5tiTSlii3ntA7yaf*t, BEttft^a.-JP 

7 3 K E* 3 n Jfc A y => a tt i — ft L fc (,> £ $ ftfc 
Xfy^S 3 7 8lc*HT. SAM6 2(4. 0^ii- 

[0 18 7] d©«fc5(C. l/-/-A-5 1(i, 3>-^>>.y 

[0 18 8] 05 614, H110M*tt«a-1f* 
— by — & 5 (C&HT. U~>— A* 5 l#r3-y 

5 6^3>T->iyS:S*$1i--5)^ia^|fi0J-r^7P-5 1 
■V-h-Cfc*. Xf7 7S3 9 1MXfyyS3 9 7 

©®3(4, 05 5©^f7ys 3 6 mm^yys 3 

6 7©^Si^n^*tX|5l#T*-5©-C, ^-©t8W4#B§ 

[0 18 9] 7f7/S 3 9 8iCt3ViT, SAM 6 2 ©ffi 
188=6^3-^7 1 £rn-¥5 6 OffilBK^a 
-;H 0 1(4, 4BSBIEU -«f«K t erap^ts 

n*. ^©igtiE&ste. 03 771/S03 9&#figbTia 

BJbfeS-&<»:(5|1iTr*- : 5©T. £Cl-C(4i&lJII£*B&-r 
*. iSBII:fflV>6ft4aRRl, R2. *fc*4R 3 
**. -SlfKtempiLTffl^etlS. Xfy^S 3 
9 9l-*Slr»T. m.n/m^rit^:'J=L-)V7 4<DQ&3.- 
•.y h 9 1 (4. HDD 5 2 KlE® >t>7«K c o 

Ettre5?a-* 7 3 lC!E1«£ftfc{S#ffl®K s a v 

e-c^rr-s, 7r7 7S4ooi;t5^T. m^/m^ 

ft=ti?a-;i-7 4©*^ai:y h9 314. «^Stifc 
n >7^>!y»K c o £— P^ttK temp Tfflf^fT-S. 
^T7^S 4 0 1 (C*5ViT, SAM 6 2(4. — B#S|K t e 
mpTBt^-fk$nfe^>5 : ->U/^Kc oi&f3-y5 6 

[0 19 0] XT7yS4 0 2l;*HT, r^-y5 6 
©Sf€ya-JH0 2H 3>7>7lKcoJ-H 
iKtempftftS. Xf-y^S 4 0 3 fc&I^T. 
SAM6 2(4. HDD5 2fcE»Snfcn>5 l >y£tt*Hi 
b. 7^3-^5 6 tiUM-r*. XfyyS4 0 4l:t5H 
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T» rn-y5 6fflt§tya-;H 0 3H 3 >^> 
y&=l>T>ymKc T.^-^T'S 4 0 5 

tlfz 3 >5=" > V £ATRAC2& f CD0r^O^T#5S-r 
•5. 7r^yS 4 0 6 tCfc^T. 7^ — ^ 5 6 ©C* — 

^v-^^io^evi-;n o s«, #asnfca>7-> 

A-T-S. Xf77S 4 0 7 ICiSHT, 73-^5 6(1 

l, $ag£**7T5. 10 

[0 19 1] X^y-fS 4 0 8©£flffitt, 0 5 5 ©X7- 
[0 19 2] W±©J:5IC, 3.— if*— A* 3/ h>7-i7 

at0 1 1 ic^-r#tES£*r-r&*i"a\ i/->-/\* 5 1 atgft 
[0193] He i*#BauT«a-rs*aFfflaoflttK: 

ff:bn&, EMD-9— h*X-fe>^ 1 ©fli^r^vx^ h£ 
ffr&T&MJISr. 05 7O7D-rt-h*#Il/TSa 
^•T?)o Xfy^S 4 2 1 ICiJ^T. EMD-9— b*X-fe> 20 
^ 1 ©iHS7— ^WSgBl 5tt, 04 7©Xf7yS 1 
8 7 J^r-^ys 1 8 9UHX'=l— b 

fc^^«$g^fim»SBSBi 6\zm.m-? x9-<y7S4 
2 2ict5^x, *jjt»E»i6tt, mm^-^^mmi 

5 a> e §ff L fcaS&lt $8 k zj y t- > y :/ d /U ? 2 £> J: 
tfif- tfxyDA'f y 3 ^©fiJ^E^^^-T^-^^ 

§mbfc^^1t$g{cn>x>U/7 ,, D/l-r^2*5J:OC-y— 30 

fxyp/H ^3 ^owttE^sstT-^^snx 

Vi-5<hflJ^$n}t«-&. X^-y^S 4 2 3JCjItr. 
[0 19 4] Xf7yS4 2 3l:*l>T, fJ^Gffi 1 
6te. R£**fc$$n<5f<J2E#SjR-r5 f --$'£#JS 
LT. ^©P^^y^JfllUi'caL— ifa>£if— h"X 
yn/W ^3^«3£&V^*ffm-r^= Xf';/S4 2 
4{C*5V^T, fiJ&#Eg& 1 6 te. iS^tSfSf^Stl^flJ 

*^3>f>yyn/Hy2'v©$t! l ^S£Ittit5. 
Xf^yS4 2 5l:*^T. $J&£-&ffi 1 6 Ji. R^W 40 

yy-rur\<i ?2 £«*Uffl#^©£ftv^£liLai U 
x^y :7 s 429 (ciitr. 

[0 19 5] X-t^^S 4 2 2 (CiS^T. llr-i'f 

2 *5cfc tf-y— fx /DA'-f ^3 ^©*ij&ge#£^-rx- 
^^inT^aiJiflSstiti^. xf7 7s 4 2 

6 fcJi*. fiJ£#BEgB 1 6 tt. *iJ£$xiBgB 1 6 ^82^1" 

Lfc^--if ^ 6-y— fx ynA-rys^ji^ 50 
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«£SEib-f-5. Xf7/S 4 2 7 IC*iHT, fiJ&#iEgB 

1 6tt. 5pJJS»iBai5 1 6atf21gT5flJ&8B#x*-^- 

4 2 9 Icittf. 

[0 19 6] 7f7^S 4 2 9 IdiJl^T, flJ&frEgU 

/<-7©T-?§#ILT, Blf^CDZL-if*^if--h'X 
^D/H ^ 3 ^©S&V^ t: X 7"D/N*-f ^ 3 <=> 

3>^>!y^"D/l--f^2^<D3^fA^. *3«t^a>T-> 

[0 19 7] Xf';7S 4 3 0 fd&^T. llf-^f 
Sg&15te, -r^T©n>5 : -> > ytCt3^TX-r--y7 p S 4 

2 3 73/SXt-^^S 4 2 9 ©tM¥S*fT Ufc^5^<£fJ 

-r^T©a >r>7t-3^TXf7yS 4 2 37!) 
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[Title of the Invention] 

INFORMATION PROCESSING APPARATUS , INFORMATION 
PROCESSING METHOD, AND MEDIUM FOR PROVIDING THE SAME 
[Abstract] 

[Objective] To enable settlement processing and profit - 
calculation processing to be performed efficiently. 
[Means for Solution] A prof it -distribution section 16 
stores data which specify information, and data which 
indicate an amount to be paid to each information provider 
for use of the information. The profit-distribution section 
16 calculates the sum total of amounts to be paid to each 
information provider, on the basis of the stored data. A 
treasury section 20 instructs a settlement institute to 
perform settlement for each information provider, on the 
basis of profit gained by each information provider, which is 
calculated by the profit-distribution section 16. 
[Claims] 

[Claim 1] An information processing apparatus which collects, 
on behalf of information providers, usage fees from users of 
information provided by said information providers and 
distributes profits to said information providers, 
characterized by comprising: 

storage means for storing data which specify said 
information, and data which indicate an amount to be paid to 
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each of said information providers for use of said 
information ; 

calculation means for calculating the sum total of 
amounts to be paid to each of said information providers, on 
the basis of data stored in said storage means; and 

settlement instruction means for instructing a 
settlement institute to perform settlement for each of said 
information providers, on the basis of profits gained by each 
of said information providers* 

[Claim 2] An information processing apparatus as described 
in claim 1, characterized in that said calculation means 
further calculates the sum total of amounts to be paid to 
said information providers. 

[Claim 3] An information processing apparatus as described 
in claim 1, characterized in that said storage means further 
stores information regarding an amount to be paid to an 
organization which collects copy-right fees of said 
information ; 

said calculation means further calculates the sum total 
of amounts to be paid to said organization; and 

said settlement instruction means further instructs 
said settlement institute to perform settlement for said 
organization . 

[Claim 4] An information processing apparatus as described 
in claim 1, characterized in that said storage means further 
stores data regarding discounts of usage fees of information. 
[Claim 5] An information processing apparatus as described 
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in claim 1, characterized in that said settlement instruction 
means stores information regarding a settlement institute for 
each of said information providers. 

[Claim 6] An information processing method which collects, 
on behalf of information providers, usage fees from users of 
information provided by said information providers and 
distributes profits to said information providers, 
characterized by comprising: 

a storing step for storing data which specify said 
information, and data which indicate an amount to be paid to 
each of said information providers for use of said 
information; 

a calculating step for calculating the sum total of 
amounts to be paid to each of said information providers, on 
the basis of data stored in said storing step; and 

a settlement instructing step for instructing a 
settlement institute to perform settlement for each of said 
information providers, on the basis of profits gained by each 
of said information providers. 

[Claim 7] A provision medium for providing a computer- 
readable program to an information processing apparatus which 
collects, on behalf of information providers, usage fees from 
users of information provided by said information providers 
and distributes profits to said information providers, said 
program causing said information processing apparatus to 
execute processing which comprises : 

a storing step for storing data which specify said 
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information, and data which indicate an amount to be paid to 
each of said information providers for use of said 
information ; 

a calculating step for calculating the sum total of 
amounts to be paid to each of said information providers, on 
the basis of data stored in said storing step; and 

a settlement instructing step for instructing a 
settlement institute to perform settlement for each of said 
information providers, on the basis of profits gained by each 
of said information providers. 
[Detailed Description of the Invention] 
[0001] 

[Field of the Invention] The present invention relates to an 
information processing apparatus, an information processing 
method, and a medium for providing the same. More 
particularly, the present invention relates to an information 
processing apparatus, an information processing method, and a 
medium for providing the same, which collect, on behalf of 
information providers, usage fees from information users and 
distribute profits to the information providers. 
[0002] 

[Prior Art] There exists a system such that encrypted 
information such as music is transmitted to an information 
processing apparatus of a user whose has signed a 
predetermined agreement, and the user decrypts the 
information on the information processing apparatus and plays 
back the music or the like. The information provider can 
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• 



transmit information to a plurality of information providers 

to thereby provide services . 

[0003] 

[Problems to be Solved by the Invention] The information 
provider must enter an agreement with each of a plurality of 
users and collect usage fees. In addition, settlement 
processing and -prof it-calculation processing are wasteful in 
many aspects. 

[0004] In view of the foregoing, an object of the present 
invention is to perform the settlement processing and profit- 
calculation processing more efficiently. 
[0005] 

[Means for Solving the Problems] The information processing v 
apparatus described in claim 1 is characterized by 
comprising: storage means for storing data which specify the 
information, and data which indicate an amount to be paid to 
each of information providers for use of the information; 
calculation means for calculating the sum total of amounts to 
be paid to each of the information providers, on the basis of 
data stored in the storage means; and settlement instruction 
means for instructing a settlement institute to perform 
settlement for each of the information providers, on the 
basis of profits gained by each of the information providers. 
[0006] The information processing method described in claim 
6 is characterized by comprising: a storing step for storing 
data which specify the information, and data which indicate 
an amount to be paid to each of information providers for use 
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of the information; a calculating step for calculating the 
sum total of amounts to be paid to each of the information 
providers, on the basis of data stored in the storing step; 
and a settlement instructing step for instructing a 
settlement institute to perform settlement for each of the 
information providers, on the basis of profits gained by each 
of the information providers . 

[0007] The provision medium described in claim 7 is 
characterized by providing a computer -readable program which 
causes an information processing apparatus to execute 
processing comprising a storing step for storing data which 
specify the information, and data which indicate an amount to 
be paid to each of information providers for use of the 
information; a calculating step for calculating the sum total 
of amounts to be paid to each of the information providers, 
on the basis of data stored in the storing step; and a 
settlement instructing step for instructing a settlement 
institute to perform settlement for each of the information 
providers, on the basis of profits gained by each of the 
information providers. 

[0008] In the information processing apparatus described in 
claim 1, the information processing method described in claim 
6, and the provision medium described in claim 7, data which 
specify information, and data which indicate an amount to be 
paid to each of information providers for use of the 
information are stored; the sum total of amounts to be paid 
to each of the information providers is calculated on the 
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basis of the stored data; and an instruction is issued to a 
settlement institute to perform settlement for each of the 
information providers, on the basis of profits gained by each 
of the information providers . 
[0009] 

[Embodiment of the Invention] Hereinbelow. an embodiment of 
the present invention will be described. In order to show 
the correspondence between the individual means of the 
invention described in the Claims and elements in the 
embodiment described below, in the following description 
regarding the feature of the present invention, each means is 
followed by a corresponding element (however, mere example) 
in the embodiment, enclosed in parentheses. However, this 
description does not mean that the individual means is 
limited to the described element. 

[0010] An information processing apparatus described in 
claim 1 comprises storage means (e.g., a prof it -distribution 
section 16 shown in FIG; 2) for storing data which specify 
information, and data which indicate an amount to be paid to 
each of information providers for use of the information; 
calculation means (e.g., the profit-distribution section 16 
shown in FIG. 2) for calculating the sum total of amounts to 
be paid to each of the information providers, on the basis of 
data stored in the storage means; and settlement instruction 
means (e.g., a treasury section 20 shown in FIG. 2) for 
instructing a settlement institute to perform settlement for 
each of the information providers, on the basis of profit 
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gained by each of the information providers. 
[0011] FIG. 1 is a diagram used for explaining an EMD 
(Electronic Music Distribution) system to which the present 
invention is applied. In the system, content distributed to 
a user refers to digital data whose information is valuable 
in itself. In the following description, music data are used 
as an example. An EMD service center 1 transmits a 
distribution key Kd to a content provider 2, a user home 
network 5, etc. The EMD service center 1 receives from the 
user home network 5 charging information produced in 
accordance with use of content, calculates a usage fee, and 
distributes profit to the content provider 2 and a service 
provider 3 . 

[0012] The content provider 2 holds digitized content. The 
content provider 2 inserts, a watermark (electronic watermark) 
into the content in order to prove that the content is owned 
by the content provider 2, compresses and encrypts the 
content, adds predetermined information . to the encrypted 
content, and transmits it to the service provider 3. 
[0013] The service provider 3 adds price information to the 
content supplied from the content provider 2 and transmits it 
to the user home network 5 via a network 4, which is formed 
of a dedicated cable network, the Internet, or a satellite. 
[0014] The user home network 5 receives the content, and the 
price information attached thereto from the service provider 
3, uses the content through decryption and reproduction, and 
executes charging processing. Charging information obtained 
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by the charging process is transmitted to the EMD service 
center 1 when the user home network 5 obtains a distribution 
key Kd from the EMD service center 1 . 

[0015] FIG. 2 is a block diagram showing the functional 
configuration of the EMD service center 1. A service- 
provider management section 11 supplies to the service 
provider 3 information regarding profit distribution. 
Further, when information (handling policy) which is added to 
content from the content provider 2 is encrypted information, 
the service -provider management section 11 transmits a 
distribution key Kd to the service provider 3. A content- 
provider management section 12 transmits to the content 
provider 2 a distribution key Kd and information regarding 
profit distribution. A copyright management section 13 
transmits to an organization which manages copyrights; e.g., 
JASRAC (Japanese Society for Rights of Authors, Composers and 
Publishers) information which shows a record of use of the 
content by the user home network 5. A key server 14 stores 
distributions keys Kd and supplies the distributions keys Kd 
to the content provider 2, the user home network 5, etc., via 
the content -provider management section 12 or a user 
management section 18. The user management section 18 inputs 
and stores in a historical-data management section 15 
charging information, which is information showing a record 
of use of content by the user home network 5, price 
information corresponding to the content, and handling policy 
corresponding to the content. 
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[0016] An example in which distribution keys Kd are 
regularly transmitted from the EMD service center 1 to the 
content provider 2 and a receiver 51 (which will be described 
in relation to FIG. 10) which constitutes the user home 
network 5 will be described with reference to FIGS. 3 to 6. 
FIG. 3 is a diagram which shows distribution keys Kd held by 
the EMD service center 1, distribution keys Kd held by the 
content provider 2, and distribution keys Kd held by the 
receiver 51, in January, 1998, when the content provider .2 
starts provision of content and the receiver 51 constituting 
the user home network 5 starts use of the content. 
[0017] In the example of FIG. 3, each distribution key Kd 
can be used from the first day to the last day of the 
corresponding calendar month. For example, a distribution 
key Kd of version 1 having a value of " aaaaaaaa , " which is a 
random number having a predetermined number of bits, can be 
used from January 1, 1998 to January 31, 1998 (that is, a 
content key Kco which is used for encrypting content which 
the service provider 3 distributes to the user home network 5 
during the period from January 1, 1998 to January 31, 1998 is 
encrypted by use of the distribution key Kd of version 1). 
A distribution key Kd of version 2 having a value of 
"bbbbbbbb , " which is a random number having a predetermined 
number of bits, can be used from February 1, 1998 to February 
28, 1998 (that is, a content key Kco which is used for 
encrypting content which the service provider 3 distributes 
to the user home network 5 during that period is encrypted by 
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use of the distribution key Kd of version 2). Similarly, a 
distribution key Kd of version 3 can be used in March, 1998; 
a distribution key Kd of version 4 can be used in April, 
1998; a distribution key Kd of version 5 can be used in May, 
1998; and a distribution key Kd of version 6 can be used in 
June, 1998. 

[0018] Before the content provider 2 starts provision of 
content, the EMD service center 1 transmits to the content 
provider 2 six distribution keys Kd of version 1 to 6, which 
can be used in January, 1998 to June, 1998. The content 
provider 2 receives and stores the six distribution keys Kd. 
The reason why the content provider 2 stores the 
distribution keys Kd for six months is that before provision 
of the content, the content provider 2 requires a certain 
period for preparation of the content and encryption of a 
content key. 

[0019] Before the receiver 51 starts use of the content , the 
EMD service center 1 transmits to the receiver 51 three 
distribution keys Kd of versions 1 to 3 which can be used in 
January, 1998 to March, 1998. The receiver 51 receives and 
stores the three distribution keys Kd. The reason why the 
receiver 51 stores the distribution keys Kd for three months 
is to avoid a situation such that the user home network 5 
cannot utilize the content even within an agreed period 
during which the content is available, due to problems such 
that the receiver 51 cannot be connected to the EMD service 
center 1, and to reduce the frequency of the receiver 51 
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being connected to the EMD service center 1 and load on the 
user home network 5 . 

[0020] During the period from January 1, 1998 to January 31 , 
1998 , the distribution key Kd of version 1 is used among the 
EMD service center 1, the content provider 2, and the 
receiver 51, which constitutes the user home network 5. 
[0021] Transmission of distribution keys Kd from the EMD 
service center 1 to the content provider 2 and the receiver 
51 on February 1, 1998 will be described with reference to 
FIG. 4. The EMD service center 1 transmits to the content 
provider 2 six distribution keys Kd of versions 2 to 7, which 
can be used from February, 1998 to July, 1998. The content 
provider 2 receives the six distribution keys Kd and 
overwrites them on the previously stored distribution keys Kd 
to thereby store the new distribution keys Kd. The EMD 
service center 1 transmits to the receiver 51 three 
distribution keys Kd of versions 2 to 4, which can be used 
from February, 1998 to April, 1998. The receiver 51 receives 
the three distribution keys Kd and overwrites them on the 
previously stored distribution keys Kd to thereby store the 
new distribution keys Kd. The EMD service center 1 stores 
the distribution key Kd of version 1 without erasing it. 
This is to allow use, when an unexpected trouble occurs or a 
fraudulent activity is performed or discovered, of the 
distribution key Kd which was used in the past. 
[0022] During the period from February 1, 1998 to February 
28, 1998, the distribution key Kd of version 2 is used among 
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the EMD service center 1 , the content provider 2 , and the 
receiver 51 , which constitutes the user home network 5. 
[0023] Transmission of distribution keys Kd from the EMD 
service center 1 to the content provider 2 and the receiver 
51 on March 1, 1998 will be described with reference to FIG. 

5. The EMD service center 1 transmits to the content 
provider 2 six distribution keys Kd of versions 3 to 8, which 
can be used from March, 1998 to August, 1998. The content 
provider 2 receives the six distribution keys Kd and 
overwrites them on the previously stored distribution keys Kd 
to thereby store the new distribution keys Kd. The EMD 
service center 1 transmits to the receiver 51 three 
distribution keys Kd of versions 3 to 5, which can be used 
from March, 1998 to May, 1998. The receiver 51 receives the 
three distribution keys Kd and overwrites them on the 
previously stored distribution keys Kd to thereby store the 
new distribution keys Kd. The EMD service center 1 stores 
the distribution key Kd of version 1 and the distribution key 
Kd of version 2 without erasing them. 

[0024] During the period from March 1, 1998 to March 31, 
1998, the distribution key Kd of version 3 is used among the 
EMD service center 1, the content provider 2, and the 
receiver 51, which constitutes the user home network 5. 
[0025] Transmission of distribution keys Kd from the EMD 
service center 1 to the content provider 2 and the receiver 
51 on April 1, 1998 will be described with reference to FIG. 

6. The EMD service center 1 transmits to the content 
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provider 2 six distribution keys Kd of versions 4 to 9, which 
can be used from April, 1998 to September, 1998. The content 
provider 2 receives the six distribution keys Kd and 
overwrites them on the previously stored distribution keys Kd 
to thereby store the new distribution keys Kd. The EMD 
service center 1 transmits to the receiver 51 three 
distribution keys Kd of versions 4 to 6, which can be used 
from April, 1998 to June, 1998. The receiver 51 receives the 
three distribution keys Kd and overwrites them on the 
previously stored distribution keys Kd to thereby store the 
new distribution keys Kd. The EMD service center 1 stores 
the distribution key Kd of version 1, the distribution key Kd 
of version 2, and the distribution key Kd of version 3 
without erasing them. 

[0026] During the period from April 1, 1998 to April 30, 
1998, the distribution key Kd of version 4 is used among the 
EMD service center 1, the content provider 2, and the 
receiver 51, which constitutes the user home network 5. 
[0027] As described above, since distribution keys Ks for 
future months are distributed in advance, the user can 
purchase the content even when the user does not access the 
center at all during a period of one or two months, and can 
receive a key by accessing the center at a convenient time. 
[0028] The profit-distribution section 16 calculates profits 
of the EMD service center 1, the content provider 2, and the 
service provider 3, on the basis of the charging information, 
price information, and handling policy, which are supplied 
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from the historical-data management section 15. A mutual 
authentication section 17 executes mutual authentication, 
which will be described later, with the content provider 2, 
the service provider 3, and a predetermined apparatus of the 
user home network 5. 

[0029] The user management section 18 has a user- 
registration database. When a registration request is issued 
from the apparatus of the user home network 5, the user 
management section 18 searches the user-registration database, 
and, on the basis of the contents of the record, performs 
processing for registering the apparatus or denying the 
registration. When the user home network 5 consists of a 
plurality of apparatuses which can be connected to the EMD 
service center 1, the user management section 18 designates 
an apparatus to be used for settlement, on the basis of 
results of judgment as to whether individual apparatuses can 
be registered. Further, the user management section 18 
transmits to the predetermined apparatus of the user, home 
network 5 a registration list which prescribes conditions of 
use of the content . 

[0030] FIG. 7 shows an example of the user-registration 
database. A 64-bit ID (Identification Data) peculiar to each 
apparatus of the user home network 5 is recorded. Further, 
for each ID (i.e., for each apparatus having the 
corresponding ID), there is provided information indicating 
whether the apparatus can perform settlement processing, 
information indicating whether the apparatus can be 
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registered, and information indicating whether the apparatus 
can be connected to the EMD service center 1 . The 
information indicating possibility of registration recorded 
in the user-registration database is updated at predetermined 
time intervals, on the basis of information regarding 
nonpayment of fees, fraudulent processing, etc., provided 
from the settlement institute (e.g., bank) or the service 
provider 3 . When an apparatus having an ID which is recorded 
as being not registerable issues a registration request, the 
user management section 18 denies the registration. 
Subsequent to this, the apparatus cannot utilize contents of 
the system. 

[0031] The information indicating possibility of settlement 
processing recorded in the user-registration database 
indicates whether that apparatus can effect settlement. In 
the case in which the user home network 5 consists of a 
plurality of apparatuses which can use content through 
reproduction or copying thereof, among the plurality of 
apparatuses, one apparatus which can effect settlement 
outputs to the EMD service center 1 the charging information, 
price information, and handling policy for all the 
apparatuses of the user home network 5 registered in the EMD 
service center 1. The information indicating possibility of 
connection with the EMD service center 1 recorded in the 
user-registration database indicates whether that apparatus 
can be connected to the EMD service center 1 . An apparatus 
which is recorded as being unconnectable outputs charging 
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information, etc. to the EMD service center 1 via other 
apparatuses of the user home network 5. 

[0032] The user management section 18 receives charging 
information, price information, and handling policy supplied 
from apparatuses of the user home network 5 and outputs them 
to the historical-data management section 15. Further, 
through predetermined processing (at predetermined timing), 
the user management section 18 supplies distribution keys Kd 
to the user home network 5 . 

[0033] A charge billing section 19 calculates a charge for 
the user, on the basis of charging information, price 
information, and handling policy supplied from the 
historical-data management section 15. and supplies 
calculation results to the treasury section 20. The treasury . 
section 20 communicates with an unillustrated external bank 
or a like organization in order to perform settlement 
processing, on the basis of amounts of money to be paid to 
and usage fees to be collected from the user, the content 
provider 2. and the service providers. An auditor section 
21 audits accuracy of the charging information, price 
information, and handling policy supplied from the apparatus 
of the user home network 5 (i.e., whether fraudulence is 
present therein) . 

[0034] FIG. 8 is a block diagram showing the functional 
configuration of the content provider 2. A content server 31 
stores content to be supplied to users and supplies it to a 
watermark adding section 32. The watermark adding section 32 
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adds a watermark to the content supplied from the content 
server 31 and sends it to a compression section 33. The 
compression section 33 compresses the content supplied from 
the watermark adding section 32 in accordance with an ATRAC 2 
(Adaptive Transform Acoustic Coding 2) (Trademark) scheme or 
any other scheme and supplies the compressed content to an 
encryption section 34. The encryption section 34 encrypts 
the content compressed by the compression section 33 in 
accordance with a common key cryptosystem such as DES (Data 
Encryption Standard) and by use, as a key, of a random number 
supplied from a random-number generation section 35 
(hereinafter, this random number will be referred to as a 
content key Kco), and outputs the result of the encryption to 
a secure container creation section 38. 

[0035] The random-number generation section 35 outputs to 
the encryption section 34 and the encryption section 36 a 
random number having a predetermined number of bits and 
serving as a content key Kco. The encryption section 36 
encrypts the content key Kco in accordance with a common key 
cryptosystem such as DES and by use of a distribution key Kd 
supplied from the EMD service center 1, and outputs the 
results of encryption to the secure container creation 
section 38. 

[0036] DES is an encryption system which processes plain 
text while handling 64 bits as a single block. The 
processing of DES consists of a portion (data scrambling 
section) for scrambling plain text and converting it into 
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encrypted text, and a portion (key processing section) for 
generating from a common key a key (extended key) to be used 
in the data scrambling section. Since the entire algorithm 
of DES is opened to the public, here, the basic processing of 
the data scrambling section will be described briefly. 
[0037] First, 64 bits of plain text are divided into upper 
32 bits H 0 and lower 32 bits L 0 . A 48 -bit extended key K x 
supplied from the key processing section and the lower 32 
bits L 0 are used as inputs in order to calculate an output of 
an F-function in which the lower 32 bits L 0 have been 
scrambled. The F-function consists of "replacement" for 
replacing numerals in accordance with a predetermined rule 
and "transposition" for transposing bit positions in 
accordance with a predetermined rule. Subsequently, the 
upper 32 bits H 0 and the F-function output are subjected to ^ 
exclusive-OR, and the result is used as L x . L 0 is used as H x . 
[0038] On the basis of the upper 32 bits H 0 and the lower 32 
bits L 0 , the above-described processing is repeated 16 times; 
and the thus-obtained upper 32 bits H 16 and lower 32 bits L 16 
are output as encrypted text. Decryption is performed to 
inversely follow the above -described steps, while using the 
common key used in the encryption. 

[0039] A policy storage section 37 stores a policy on 
handling of content, and outputs to the secure container 
creation section 38 a handling policy corresponding to 
content to be encrypted. The secure container creation 
section 38 creates a content -provider secure container and 
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supplies it to the service provider 3. The content -provider 
secure container includes encrypted content; an encrypted 
content key Kco; a handling policy; a signature created from 
hash values of the encrypted content , the encrypted content 
key Kco, and the handling policy; and a certificate including 
a public key Kpcp of the content provider 2 . Before 
receiving a distribution key Kd from the EMD service center 1, 
a mutual authentication section 39 mutually authenticates 
with the EMD service center 1. Further, before transmission 
of the content -provider secure container to the service 
provider 3, the mutual authentication section 39 mutually 
authenticates with the service provider 3. 

[0040] Signature refers to data which are attached to data 
or a certificate, which will be described later, in order to 
enable check for tampering and perform author authentication. 
A hash value is obtained by use of a hash function and on the 
basis of data to be transmitted; and the thus -obtained hash 
value is encrypted by a private key of a public key 
cryptosystem. 

[0041] The hash function and signature collation will be 
described. The hash function is a function which receives 
predetermined data to be transmitted, compresses the data 
into data having a predetermined bit length, and outputs the 
result as a hash value. The hash function has features such 
that an input is difficult to predict from a hash value 
(output), that when a certain bit of data input to the hash 
function changes, many bits of the hash value change, and 
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that finding input data having the same hash value is 
difficult . 

[0042] A receiving person who has received a signature and 
data decrypts the signature by use of a public key of the 
public key crypt osys tern to obtain a resultant value (hash 
value). Further, a hash value of the received data is 
calculated; and a judgment is made as to whether the 
calculated hash value is equal to the hash value obtained 
through decryption of the signature. When the hash value of 
the transmitted data is judged to be equal to the decrypted 
hash value, this means that the received data have not been 
subjected to tampering and have been transmitted from a 
transmitting person who holds a private key corresponding to 
the public key. Examples of the hash function for signature 
include MD4 , MD5 , and SHA-1. 

[0043] Next, the public key cryptosystem will be described, 
in contrast to a common key cryptosystem in which, the same 
key (common key) is used for encryption and decryption, in 
the public key cryptosystem. a key used for encryption 
differs from a key used for decryption. When the public key 
cryptosystem is employed, even when one of the keys Is 
disclosed, the other can be kept secret. A key which may be 
opened to the public is called a public key; and a key which 
is kept secret is called a private key. 

[0044] RSA (Rivest- Shamir- Adleman) cryptosystem, which is a 
typical example of the public key cryptosystem. will be 
described briefly. First, two sufficiently large prime 
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numbers p and q are obtained, and then a product n of p and q 
is obtained. The least common multiple L of (p-1) and (q-1) 
is calculated. Subsequently, a number e which is at least 3 
but less than L and which shares no common factors with L 
(i.e., 1 is the only natural number by which both e and L can 
be divided evenly) is obtained. 

[0045] Subsequently, a multiplicative inverse element d of e 
modulo L is obtained. That is, ed=l mod L holds among d, e, 
and L, and d can be calculated through the Euclidean 
algorithm, n and e are used as public keys; and p, q, and d 
are used as private keys . 

[0046] An encrypted text C is calculated from a plain text M 

through processing of formula (1). 

C = M*e mod n (1) 

[0048] The encrypted text C is decrypted to the plain text M 

through processing of formula (2). 

M = C~d mod n (2) 

[0048] Although proof is omitted, the reason why a plain 
text can be converted to an encrypted text by the RSA 
cryptosystem and the encrypted text can be decrypted is based 
on Fermat 1 s theorem, and formula (3) stands. 
M = CTd = (M~e)~d = M~(ed) mod n (3) 

[0049] If the private keys p and q are known, the private key 
d can be calculated from the public key e. However, if the 
number of digits of the public key n is increased to a degree 
such that factorization of n in prime numbers is difficult 
from the viewpoint of calculation volume , even if the public 
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key n is known, the private key d cannot be calculated from 
the public key e, making decryption impossible. As described 
above, in the RSA cryptosystem, the key used for decryption 
is made different from the key used for encryption. 
[0050] Further, the elliptic -curve cryptosystem, which is 
another example of the public key cryptosystem, will be 
described briefly. Assume that a certain point on an 
elliptic curve y~2 = X~3+ ax+b is denoted by B. Addition of 
points on the elliptic curve is defined, and nB represents a 
result of n times of addition of B. Similarly, subtraction 
is defined. It has been proved that calculating n from B and 
nB is difficult. B and nB are used as public keys; and n is 
used as a private key. Encrypted texts CI and C2 are 
calculated from a plain text M by use of a random number r 
and the public key, through processing represented by 
formulas ( 4 ) and ( 5 ) . 

CI = M+rnB (4) 

C2 = rB (5) 
[0051] The encrypted texts CI and C2 are decrypted to the 
plain text M through processing of formula (6). 

M = CI - nC2 (6) 
[0052] Only a person who has the private key n can decrypt 
the encrypted texts. As described above, as in the case of 
the RSA cryptosystem, when the elliptic-curve cryptosystem is 
employed, the key used for decryption can be made different 
from the key used for encryption. 

[0053] FIG. 9 is. a block diagram showing the functional 
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structure of the service provider 3. A content server 41 
stores encrypted content supplied from the content provider 2 
and supplies it to a secure container creation section 44. A 
Pricing section 42 creates price information on the basis of 
a handling policy corresponding to the content and supplies 
it to the secure container creation section 44. A policy 
storage section 43 stores the handling policy of the content 
supplied from the content provider 2 and supplies it to the 
secure container creation section 44. Before receiving a 
content -provider secure container from the content provider 2, 
a mutual authentication section 45 mutually authenticates 
with the content provider 2. Further, before transmission of 
a service -provider secure container to the user home network 
5, the mutual authentication section 45 mutually 
authenticates with the user home network 5 . When the content 
provider 2 supplies the handling policy after encryption with 
a distribution key Kd, the mutual authentication section 4 5 
mutually authenticates with the EMD service center 1, before 
reception of the distribution key Kd from the EMD service 
center 1. 

[0054] FIG. 10 is a block diagram showing the configuration 
of the user home network 5. The receiver 51 receives a 
service -provider secure container including content from the 
service provider 3 via the network 4; and decrypts, extends, 
and reproduces the content. 

[0055] A communication section 61 communicates with the 
service provider 3 and the EMD service center 1 via the 
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network 4 to thereby receive information therefrom and 
transmit information thereto. A SAM (Secure Application 
Module) 62 mutually authenticates with the service provider 3 
or the EMD service center 1; decrypts a cipher of the content 
or encrypts the content; and stores the distribution key Kd 
and other data. An extension section 63 decrypts the cipher 
of the content, extends it in accordance with the ATRAC 2 
scheme, and inserts a predetermined watermark into the 
content. An IC (Integrated Circuit ) -card interface 64 
converts the signal from the SAM 62 into a predetermined form 
and outputs the result to an IC card 55 attached to the 
receiver 51; and converts the signal from the IC card 55 into 
a predetermined form and outputs the result to the SAM 62. 

[0056] The SAM 62 which mutually authenticates with the 

service provider 3 or the EMD service center 1, performs 
charging processing, decrypts and encrypts the content key 
Kco, and stores predetermined data such as information 
regarding conditions for permission of use (hereinafter 

referred to as "conditions -for-use information") includes 

a mutual authentication module 71, a charging processing 
module 72, a storage module 73, and a decryption/encryption 
module 74. The SAM 62 is formed of a single chip IC 
dedicated for cipher processing which has a multilayer 
structure such that an internal memory cell is sandwiched 
between dummy layers of. for example, aluminum and has 
characteristics (tampering resistance) which make it 
difficult to illegally read data from the outside; such as a 
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narrow operable voltage range and a narrow operable frequency 
range . 

[0057] The mutual authentication module 71 mutually 
authenticates with the service provider 3 or the EMD service 
center 1; and, if necessary, supplies a temporary key Ktemp 
(session key) to the decryption/encryption module 74. The 
charging processing module 72 generates charging information 
and conditions-for-use information, from the handling policy 
and price information (and handling control information in 
some cases) contained in the service -provider secure 
container received from the service provider 3; and outputs 
them to the storage module 73 or a HDD (Hard Disk Drive) 52. 
The storage module 73 stores various data such as the 
charging information and a distribution key Kd supplied from 
the charging processing module 72 or the 

decryption/encryption module 74. When any other function 
block performs predetermined processing, the storage module 
73 supplies, the distribution key Kd and other data to that 
block. 

[0058] The decryption/encryption module 74 includes a 
decryption unit 91, a random-number generation unit 92, and 
an encryption unit 93. The decryption unit 91 decrypts an 
encrypted content key Kco with a distribution key Kd and 
outputs it to the encryption unit 93. The random-number 
generation unit 92 generates a random number having a 
predetermined number of digits and outputs the random number 
to the encryption unit 93 and the storage module 73 as a save 
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key Ksave. When the save key Ksave is already generated and 
stored, generation of the key is not required. The 
encryption unit 93 encrypts the decrypted content key Kco 
with the save key Ksave and outputs it to the HDD 52. When 
the content key Kco is transmitted to the extension section 
62. the encryption unit 93 encrypts the content key Kco with 
the temporary key Ktemp. 

[0059] The extension section 63 which decrypts and extends 

the content and adds a predetermined watermark to the 

content -includes a mutual authentication module 75. a 

decryption module 76. a decryption module 77, an extension 
module 78, and a watermark addition module 79. The mutual 
authentication module 7 5 mutually authenticates with the SAM 
62 and outputs the temporary key Ktemp to the decryption 
module 76. The decryption module 76 decrypts the content key 

Kco which was encrypted with the temporary key 

Ktemp with the temporary key Ktemp and outputs it to the 

decryption module 77. The decryption module 77 decrypts the 
content stored in the HDD 52 with the content key Kco and 
outputs it the extension module 78. The extension module 78 
extends the decrypted content in accordance with ATRAC 2 or 
any other scheme and outputs it to the watermark addition 
module 79. the watermark addition module 79 inserts into the 
content a predetermined watermark specifying the receiver 51 
and outputs it to a recorder 53; and outputs the content to 
an unillustrated speaker to thereby reproduce music. 
[0060] The HDD 52 records thereon the content supplied from 
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the service provider 3 . The recorder 53 which records the 

content supplied from the service provider 3 on an attached 
optical disk (not shown) and reproduces the 

content includes a record/reproduction section 65, an SAM 

66, and an extension section 67, The record/reproduction 
section 65 includes an optical disk attached thereto and 
adapted to record the content on the optical disk and 
reproduce the content from the optical disk. The SAM 66 has 
the same function as that of the SAM 62, and therefore 
repeated description is omitted- The extension section 67 
has the same function as that of the extension section 63, 
and therefore repeated description is omitted. An MD (Mini 
Disk; trademark) drive 54 records the content supplied from 
the service provider 3 on an attached MD (not shown) and 
reproduces the content from the MD. 

[0061] The IC card 55 is attached to the receiver 51 and 
stores predetermined data such as an equipment ID and. the. 
distribution key Kd stored in the storage module 73. In an 
example case in which a user has purchased a new receiver 51 
and uses it in place of the previous receiver 51, the user 
first stores in the IC card 55 predetermined data such as the 
distribution key Kd which are stored in the storage module 73 
of the previous receiver 51. Next, the user attaches the IC 
card 55 to the new receiver 51 and operates the receiver 51 
in order to register the new receiver 51 in the user 
management section 18 of the EMD service center 1. On the 
basis of the data (ID of the previous receiver 51, etc.) 
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stored in the IC card 55, the user management section 18 of 
the EMD service center 1 searches the database held in the 
user management section 18 to obtain data in relation to the 
user, such as the name of the user, and the number of a 
credit card used for payment of usage fees. On the basis of 
the data, the user management section 18 executes 
registration processing. Therefore, the user is not required 
to input data, which is cumbersome. The IC card 55 includes 
a mutual authentication module 80 and a storage module 81. 
The mutual authentication module 80 mutually authenticates 
with the SAM 62. The storage module 81 stores the data 
supplied from the SAM 62 via the IC-card interface 64 and 
outputs the stored data to the SAM 62. 
[0062] FIG. 11 is a block diagram showing another 
configuration of the user home network 5. The receiver 51 
and the recorder 53 in the present configuration do not have 
the extension sections 63 and 67 shown in FIG. 10. Instead, 
a decoder 56 connected to the recorder 53 provides the same 
function as that provided by the extension section 63 or 67. 
The remaining sections and modules have the same 
configurations as those in FIG. 10. 

[0063] The decoder 56 which decrypts and extends the 

content and adds a watermark to the content Includes a 

mutual authentication module 101, a decryption module 102, a 
decryption module 103, an extension module 104, and a 
watermark addition module 105. The mutual authentication 
module 101 mutually authenticates with the SAM 62 or the SAM 



29 




6 6 and outputs the temporary key Ktemp to the decryption 
module 102. The decryption module 102 decrypts the content 

key Kco which was encrypted with the temporary key Ktemp 

and is output from the SAM 62 with the temporary key Ktemp 

and outputs it to the decryption module 103. The decryption 
module 103 decrypts the content stored in the HDD 52 with the 
content key Kco and outputs it the extension module 104. The 
extension module 104 extends the decrypted content in 
accordance with ATRAC 2 or any other scheme and outputs it to 
the watermark addition module 105. the watermark addition 
module 105 inserts into the content a predetermined watermark 
specifying the decoder 56 and outputs it to the recorder 53; 
and outputs the content to an unillustrated speaker to 
thereby reproduce music. 

[0064] FIG. 12 is a diagram used for describing information 
which is exchanged among the EMD service center 1 , the 
content provider 2, the service provider 3, and the user home 
network 5. The content provider 2 stores encrypted content, 
an encrypted content key Kco, a handling policy, and a 
signature in a content-provider secure container (details of 
which will be described with reference to FIG. 13); attaches 
a certificate of the content provider 2 (details of which 
will be described with reference to FIG. 14) to the content - 
provider secure container; and transmits the content -provider 
secure container to the service provider 3. Further, the 
content provider 2 transmits to the EMD service center 1 the 
handling policy and the signature to which the certificate of 
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the content provider 2 is attached. 

[0065] The service provider 3 generates price information on 
the basis of the handling policy contained in the received 
content -provider secure container, and stores the encrypted 
content, the encrypted content key Kco, the handling policy, 
the price information, and the signature in a service- 
provider secure container (details of which will be described 
with reference to FIG. 15); attaches a certificate of the 
service provider 3 (details of which will be described with 
reference to FIG. 16) to the service -provider secure 
container; and transmits the service -provider secure 
container to the user home network 5. Further, the service 
provider 3 transmits to the EMD service center 1 the price 
information and the signature to which the certificate of the 
service provider 3 is attached. 

[0066] The user home network 5 generates use-permission L 
information from the handling policy contained in the 
received service-provider secure container, and uses the 
content in accordance with the use-permission information. 
When the content key Kco is decrypted in the user home 
network 5, charging information is generated. At a 
predetermined timing, the charging information is encrypted, 
and the handling policy and the signature are attached to the 
encrypted charging information, which is then transmitted to 
the EMD service center 1. 

[0067] The EMD service center 1 calculates a usage fee on 
the basis of the charging information and the handling policy 
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and further calculates respective profits of the EMD service 
center 1, the content -provider secure container 2, and the 
service provider 3. Moreover, the EMD service center 1 
compares the handling policy received from the content 
provider 2, the price information received from the service 
provider 3, and the charging information and the handling 
policy received from the user home network 5 in order to 
check (audit) whether illegal conduct such as tampering with 
the handling policy or illegal price increase has occurred in 
the service provider 3 or the user home network 5. 
[0068] FIG, 13 is a diagram used for describing the content- 
provider secure container. The content -provider secure 
container includes content encrypted by use of a content key 
Kco; the content key Kco encrypted by use of a distribution 
key Kd; a handling policy; and a signature. The signature is 
data which are obtained as follows. A hash function is 
applied to the content encrypted by use of the content key 
Kco/ the content key Kco encrypted by use of the distribution 
key Kd, and the handling policy in order to obtain a hash 
value, which is then encrypted by use of a private key Kscp 
of the content provider 2. 

[0069] FIG. 14 is a diagram used for describing the 
certificate of the content provider 2. The certificate of 
the content provider 2 includes a version number of the 
certificate; a serial number of the certificate which an 
authentication office has allocated to the content provider 
2; an algorithm and parameters used in the signature; the 
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name of the authentication office; a valid term of the 
certificate; the name of the content provider 2; the public 
key Kpcp of the content provider; and a signature. The 
signature is data which are obtained as follows. A hash 
function is applied to the version number of the certificate; 
the serial number of the certificate which the authentication 
office has allocated to the content provider 2; the algorithm 
and parameters used in the signature ; the name of the 
authentication office; the valid term of the certificate; the 
name of the content provider 2; and the public key Kpcp of 
the content provider in order to obtain a hash value, which 
is then encrypted by use of a private key Ksca of the 
authentication office. 

[0070] FIG. 15 is a diagram used for describing the service- 
provider secure container. The service -provider secure 
container includes the content encrypted by use of the 
content key Kco; the content key Kco encrypted by use of the 
distribution key Kd; the handling policy; price information; 
and a signature. The signature is data which are obtained as 
follows. A hash function is applied to the content encrypted 
by use of the content key Kco. the content key Kco encrypted 
by use of the distribution key Kd, the handling policy, and 
the price information in order to obtain a hash value, which 
is then encrypted by use of a private key Kssp of the service 
provider 3 . 

[0071] FIG. 16 is a diagram used for describing the 
certificate of the service provider 3 . The certificate of 
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the service provider 3 includes a version number of the 
certificate; a serial number of the certificate which an 
authentication office has allocated to the service provider 
3; an algorithm and parameters used in the signature; the 
name of the authentication office; a valid term of the 
certificate; the name of the service provider 3; the public 
key Kpsp of the service provider; and a signature. The 
signature is data which are obtained as follows. A hash 
function is applied to the version number of the certificate; 
the serial number of the certificate which the authentication 
office has allocated to the service provider 3; the algorithm 
and parameters used in the signature; the name of the 
authentication office; the valid term of the certificate; the 
name of the service provider 3; and the public key Kpsp of 
the service provider in order to obtain a hash value, which 
is then encrypted by use of the private key Ksca of the 
authentication office. * * . 

[0072] FIG. 17 is a diagram showing a handling policy, price 
information, and conditions -for-use information. The content 
provider 2 has a handling policy for each piece of content, 
and the handling policy shows items which the user home 
network 5 can utilize. For example, the handling policy of 
FIG. 17(A) permits the user home network 5 to perform 
reproduction and multicopying of content but does not permit 
the user home network 5 to perform single copying of the 
content . 

[0073] FIG. 18 is a diagram used for describing multicopying 
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and single copying. A user can perform single copying or 
multicoping when the user has purchased permission for using 
content whose copying is permitted under conditions-f or-use 
information. Multicopying refers to making a plurality of 
copies. However, as shown in FIG. 18(A), the user cannot (is 
not permitted to) make a copy of a copy. Single copying 
refers to making a single copy. In the case of single 
copying as well, as shown in FIG. 18(B), the user cannot (is 
not permitted to) make a copy of a copy. 

[0074] As shown in FIG. 17(B), the service provider 3 adds 
price information to the handling policy supplied from the 
content provider 2. For example, the price information shown 
in FIG. 17(B) indicates that usage fee for reproduction of 
the content is 150 yen and that usage fee for multicopying is 
80 yen. Although not exemplified in FIG. 17, price 
information for single copying indicates usage fee for making 
a single copy, and in an example case in which the user 
performs copying three times, the user pays a fee three times 
that for single copying. Multicopying or single copying is 
permitted for only content for which copying is permitted 
under conditions-f or-use information and for which the user 
has purchased permission for use. 

[0075] When the user selects some of the usable items of the 
content (FIG. 17(B)) indicated by the handling policy 
supplied from the service provider 3, the user home network 5 
stores conditions-f or-use information (FIG. 17(C)) which 
indicates the item(s) selected by the user. For example, the 
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conditions-f or-use information of FIG. 17(C) permits the user 
home network 5 to reproduce the content but does not permit 
the user home network 5 to perform single copying and 
multicopying . 

[0076] FIG. 19 is a diagram used for describing a handling 
policy and price information. This example differs from the 
example shown in FIG. 17 in that the content provider 2 adds 
information regarding profit distribution to the handling 
policy, and the service provider 3 adds the information 
regarding profit distribution to the price information. In 
contrast to the example of FIG. 17, in the example of FIG. 19, 
information indicating that the content provider 2 can obtain 
a profit of 70 yen from a user's use in the form of 
reproduction of the content and a profit of 40 yen from a 
user's use in the form of multicopying is added (FIG. 19(A)). 
Further, prof it -distribution information indicating that the 
service provider 3 can obtain a profit of 60 yen from a. 
user's use in the form of reproduction of the content and. a 
profit of 30 yen from a user's use in the form of 
multicopying is added (FIG. 19(B)). An amount of money (e.g., 
20 yen) obtained through subtraction of a profit (e.g., 70 
yen) of the content provider 2 and a profit (e.g., 60 yen) of 
the service provider 3 from a price (e.g., 150 yen) is a 
profit of the EMD service center 1. The EMD service center 1 
obtains charging information (FIG. 19(C) which shows the use 
of the content by the user home network 5. The EMD service 
center 1 further obtains a handling policy, profit - 
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distribution ratios, and price information via the user home 
network 5, to thereby calculate the respective profits of the 
content provider 2 , the service provider 3 , and the EMD 
service center 1). 

[0077] FIG. 20 is a diagram used for describing a handling 
policy, price information, and conditions-f or-use information 
for the case in which a plurality of manners of reproduction 
of the content are set. In the example of FIG. 20(A), the 
service provider 3 sets the handling policy and price 
information to reflect a plurality of manners of reproduction 
of the content; i.e., limitless reproduction, reproduction 
within a limited number of times (5 times in this example), 
and reproduction within a limited period (until December 31, _ 
1998 in this case) . When a user uses the content while 
selecting the reproduction which is limited to 5 times, "5" 
is recorded, as a maximum number of times, in the conditions-, 
for-use information of the user home network 5 as shown in 
FIG. 20(B) in a state in which the user has not yet 
reproduced the content after receipt thereof. This value 
indicating the maximum number of times is decremented every 
time the content is reproduced (used) in the user home 
network 5. For example, after the content is reproduced 
three times, the value is changed to "2" as shown in FIG. 
20(C). When the value of the number limit becomes "0," the 
user home network 5 becomes unable to further reproduce and 
use the content. 

[0078] FIG. 21 is a diagram showing another example of 
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information exchanged among the EMD service center 1 , the 
content provider 2, the service provider 3, and the user home 
network 5. The example of FIG. 21 differs from the example 
of FIG . 12 in that the service provider 3 creates handling 
control information on the basis of the handling policy 
received from the content provider 2. The handling control 
information is stored in the service-provider secure 
container together with the content and other data and is 
then transmitted to the user home network 5 and the EMD 
service center 1. Further, the handling control information 
is transmitted from the user home network 5 to the EMD 
service center 1 together with charging information and the 
handling policy. 

[0079] FIG. 22 is a diagram used for describing a service- 
provider secure container used in the example of FIG. 21. 
The service -provider secure container includes a content 
encrypted by use of a content key Kco; the content key Kco 
encrypted by use of a distribution key Kd; a handling policy; 
handling control information; price information; and a 
signature. The signature is data which are obtained as 
follows . A hash function is applied to the content encrypted 
by use of the content key Kco, the content key Kco encrypted 
by use of the distribution key Kd, the handling policy, the 
handling control information, and the price information in 
order to obtain a hash value, which is then encrypted by use 
of a private key Kssp of the service provider 3. 
[0080] FIG. 23 shows the details of the handling policy. 
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handling control information, and conditions -for-use 
information in the example of FIG. 21. In the example of FIG. 
23 , the handling policy of the content provider 2 (FIG. 
23(A)) does not have a form such that simple addition of 
price information enables referral to price information 
through comparison between the handling policy and the price 
information. In view of the foregoing, on the basis of the 
handling policy, there is produced handling control 
information having a form which enables referral to price 
information through comparison between the handling policy 
and the price information; and the price information is added 
to the handling control information, which is then 
transmitted to the user home network 5 (FIG. 23(B)). The 
user home network 5 produces conditions -for-use information 
from the received information (FIG. 23 (C)). As compared to 
the case of FIG. 12, the content provider 2 in FIG. 23 has an 
advantage in that the handling policy that the content 
provider 2 is required to record is of a further reduced 
amount of data. 

[0081] FIG. 24 is a diagram showing another example of 
content and information accompanying the content, which are 
exchanged among the EMD service center 1, the content 
provider 2, the service provider 3, and the user home network 
5. The example of FIG. 24 differs from the example of FIG. 
21 in that in the example of FIG. 24 a handling policy, 
handling control information, price information, and charging 
information are encrypted by means of a public cryptosystem 
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and are then transmitted. As compared to the case of FIG. 21, 
the system in FIG. 24 has enhanced safety against attack from 
outside the system. 

[0082] FIG. 25 is a diagram used for describing a content- 
provider secure container used in the example of FIG. 24. 
The content -provider secure container includes content 
encrypted by use of a content key Kco; the content key Kco 
encrypted by use of a distribution key Kd; a handling policy 
encrypted by use of the distribution key Kd; and a signature. 
The signature is data which are obtained as follows. A hash 
function is applied to the content encrypted by use of the 
content key Kco, the content key Kco encrypted by use of the 
distribution key Kd, and the handling policy encrypted by use 
of the distribution key Kd in order to obtain a hash value, 
which is then encrypted by use of a private key Kscp of the 
content provider 2 . 

[0083] FIG. 26 is a diagram used for describing a service- 
provider secure container used in the example of FIG. 24. 
The service -provider secure container includes the content 
encrypted by use of the content key Kco; the content key Kco 
encrypted by use of the distribution key Kd; the handling 
policy encrypted by use of the distribution key Kd; handling 
control information encrypted by use of the distribution key 
Kd; price information encrypted by use of the distribution 
key Kd; and a signature. The signature is data which are 
obtained as follows. A hash function is applied to the 
content encrypted by use of the content key Kco, the content 
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key Kco encrypted by use of the distribution key Kd f the 
handling policy encrypted by use of the distribution key Kd. 
the handling control information encrypted by use of the 
distribution key Kd. and the price information encrypted by 
use of the distribution key Kd in order to obtain a hash 
value, which is then encrypted by use of a private key Kssp 
of the service provider 3. 

[0084] FIG. 27 is a diagram used for describing another 
operation of the EMD service center 1 for collecting data 
necessary for settlement processing, from the content 
provider 2. the service provider 3, and the user home network 
5. The content provider 2 transmits to the EMD service 
center 1 content -provider registration data consisting of the 
name of the content provider 2, a content ID, a profit of a 
proprietor organization corresponding to the content ID. and 
the number of a bank account of the content provider 2; and 
the content-provider management section 12 of the EMD service 
center 1 receives the content-provider registration data. 
Upon reception of the content -provider registration data, the 
content -provider management section 12 of the EMD service, 
center 1 generates a content -provider ID and registers the 
content -provider registration data, together with the 
content -provider ID. into a prof it -distribution database.. 
Further, the content -provider management section 12 transmits 
the content -provider ID to the content provider 2. The 
content provider 2 receives and stores the content -provider 
ID. 



41 



[0085] The service provider 3 transmits to the EMD service 
center 1 service-provider registration data consisting of the 
name of the service provider 3, a content ID, and the number 
of a bank account of the service provider 3; and the service- 
provider management section 11 of the EMD service center 1 
receives the service -provider registration data. Upon 
reception of the service-provider registration data, the 
service-provider management section 11 of the EMD service 
center 1 generates a service -provider ID and transmits the 
service-provider ID to the service provider 3. The service 
provider 3 receives and stores the content -provider ID. 
[0086] The user home network 5 transmits to the EMD service 
center 1 user registration data consisting of the name of a 
user and the number of a bank account of the user; and the 
user management section 18 of the EMD service center 1 
receives the user registration data. Upon reception of the 
user registration data, the user management section 18 of the 
EMD service center 1 generates a user ID, stores the user 
registration data together with the user ID, and transmits 
the user ID to the user home network 5 . The user home 
network 5 receives and stores the user ID. 
[0087] FIG. 28 is a diagram showing an example of the 
profit-distribution database. Distribution of profit to the 
proprietor organization corresponding to each content ID is 
stored in the profit-distribution database. The distribution 
of profit to the proprietor organization corresponding to a 
content ID indicates a ratio of distribution to the 
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proprietor organization of a profit which is produced when 
content corresponding to the content ID is utilized by the 
user. 

[0088] In the example prof it -distribution database shown in 
FIG. 28. when content whose content ID is 1 is provided from 
the service provider 3 to the user. 10% of the profit 
produced from utilization of the content by the user is 
distributed to the proprietor organization. Similarly, when 
content whose content ID is 2 is used by the user. 20% of the 
profit produced from utilization of the content by the user 
is distributed to the proprietor organization. 
[0089] FIG. 29 shows a content-fee discount table stored in 
the profit -distribution section 16 of the EMD service center 
1. The content-fee discount table stores discount rates of. 
usage fees to be paid by users for each combination of a 
content ID and a content -provider ID. The discount table is 
designed to store other information items such as periods 
during which individual discount rates are applied. 
[0090] A usage fee for content whose content ID is 1 and 
which is supplied from a content provider 2 whose content - 
provider ID is 1 is discounted at a rate of 0.02 during a 
period from September, 1998 to December, 1998. A usage fee 
for content whose content ID is 2 and which is supplied from 
a content provider 2 whose content -provider ID is 1 is 
discounted at a rate of 0.03. A usage fee for content which 
has a content ID other than 1 and 2 and which is supplied 
from a content provider 2 whose content -provider ID is 1 is 



43 



discounted at a rate of 0.01. A usage fee for content whose 
content ID is 3 and which is supplied from a content provider 
2 whose content -provider ID is 2 is discounted at a rate of 
0.05. A usage fee for content whose content ID is 1 and 
which is supplied from a service provider 3 whose service- 
provider ID is 1 is discounted at a rate of 0.03. A usage 
fee for content whose content ID is 4 and which is supplied 
from a service provider 3 whose service -provider ID is 2 is 
discounted at a rate of 0.01. 

[0091] FIG. 30 shows a user's usage-fee table stored in the 
charge billing section 19 of the EMD service center 1. The 
user's usage-fee table stores a usage fee which the user pays 
to the EMD service center 1. A monthly basic charge in the 
user's usage-fee table indicates a fixed usage fee which the 
user pays to the EMD service center 1 each month. An 
adjustment amount indicates a discount rate that is applied 
to the monthly basic charge during a predetermined special 
period and a discount rate that is applied to the monthly 
basic charge when the usage fee, including usage fees of 
contents, exceeds a predetermined amount. 

[0092] In the example user's usage-fee table shown in FIG. 
30, the monthly basic charge is 1000 yen; and the monthly 
basic charge is discounted by 10% during a period from August, 
1998 to September, 1998. Further, when the usage fee, 
including usage fees for contents, exceeds 3000 yen, the 
monthly basic charge is discounted by 5%. 
[0093] A usage fee for content is calculated from the 
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profit-distribution database or charging information; a 
discount amount is subtracted from the thus -calculated 
content usage fee; and the fee for use of the EMD service 
center 1 is added thereto, whereby a usage fee to be paid by 
a corresponding user is calculated. 

[0094] FIG. 31 shows an operation of the EMD service center 
1 when the EMD service center 1 receives charging information 
from the user home network 5. After performing mutual 
authentication with the user home network 5, the user 
management section 18 converts the temporary key Ktemp to a 
shared temporary key Ktemp, encrypts a distribution key Kd 
from the key server 14 by use of the shared temporary key 
Ktemp, and transmits it to the user home network 5. After 
decrypting the received distribution key Kd by use of the 
shared temporary key Ktemp, the user home network 5 updates 
the distribution key Kd if necessary. Further, the user home 
network 5 encrypts charging information, a handling policy, 
and other data by use of the shared temporary key Ktemp. and 
transmits them to the EMD service center 1. The user 
management section 18 receives the encrypted data. After 
decrypting the received charging information, handling policy, 
and other data by use of the shared temporary key Ktemp, the 
user management section 18 transmits them to the historical- 
data management section 15 and the charge billing section 19. 
When the historical-data management section 15 judges that 
settlement must be executed, the historical-data management 
section 15 transmits the received charging information to the 
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profit-distribution section 16 and transmits the received 
charging information, handling policy, and other data to the 
charge billing section 19. With reference to the profit- 
distribution database and the discount table, the profit- 
distribution section 16 calculates amounts to be charged to 
and amounts to be paid to the content provider 2, the service 
provider 3, and the EMD service center 1, through processing 
which will be described later with reference to FIG. 57. The 
charge billing section 19 calculates an amount to be charged 
to each user on the basis of the user's usage-fee table, and 
transmits the information to the treasury section 20. The 
treasury section 20 communicates with an unillustrated 
outside bank or the like to thereby perform settlement 
processing. At this time, when information indicating user's 
nonpayment of fee or any other fact is present, such 
information is transmitted from the charge billing section 19 
and the user management section 18 and is referred to during 
subsequent processing for user registration or processing for 
transmission of distribution keys Kd. 

[0095] FIG. 32 shows an operation of the EMD service center 
1 for profit distribution processing. The historical-data 
management section 15 transmits to the prof it -distribution 
section 16 charging information indicative of past use of 
content by a user, a handling policy, and price data. On the 
basis of these information items, the profit-distribution 
section 16 calculates respective profits of the content 
provider 2, the service provider 3, and the EMD service 
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center 1 and transmits the results of calculation to the 
service-provider management section 11, the content -provider 
management section 12. the treasury section 20, and the 
copyright management section 13. The treasury section 20 
communicates with the unillustrated outside bank or the like 
to thereby perform setting processing. The service-provider 
management section 11 transmits to the service provider 3 
information regarding the profit of the service provider 3. 
The content-provider management section 12 transmits to the 
content provider 2 information regarding the profit of the 
content provider 2. The auditor section 21 audits accuracy 
of the charging information, price information, and handling 
policy supplied from the apparatus of the user home network 5. 
[0096] FIG. 33 shows an operation of the EMD service center 
1 for transmitting to JASRAC information regarding past use 
of content by a user. The historical-data management section 
15 transmits to the copyright management section 13 and the 
profit-distribution section 16 charging information 
indicative of past use of the content by the user. With 
reference to the prof it -distribution database and the 
discount table, the prof it -distribution section 16 calculates 
an amount to be charged to and an amount to be paid to JASRAC, 
and transmits that information to the treasury section 20. 
through processing which will be described later with 
reference to FIG. 57. The treasury section 20 communicates 
with the unillustrated outside bank or the like to thereby 
perform settlement processing. The copyright management 
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section 13 transmits to JASRAC a record of use of the content 
by the user. 

[0097] Next, processing performed by the EMD system will be 
described, FIG. 34 is a flowchart used for describing the 
processing performed by the system in order to distribute and 
reproduce content. In step Sll, the content -provider 
management section 12 of the EMD service center 1 transmits 
distribution keys Kd to the content provider 2; and the 
content provider 2 receives them. The details of this 
processing will be described later with reference to the 
flowchart of FIG. 36. In step S12, a user operates an 
apparatus (e.g. , the receiver 51 of FIG. 10) of the user home 
network 5 in order to register the apparatus in the user 
management section 18 of the EMD service center 1. The 
details of this registration processing will be described 
later with reference to the flowchart of FIG. 40. In step 
S13, as shown in FIGS. 37 to 39, the user management section 
18 of the EMD service center. 1 transmits distribution keys Kd 
to the apparatus of the user home network 5 after mutual 
authentication. The user home network 5 receives the keys. 
The details of this processing will be described later with 
reference to the flowchart of FIG. 48. 

[0098] In step S14, the secure container creation section 38 
of the content provider 2 transmits a content -provider secure 
container to the service provider 3. The details of this 
transmission processing will be described later with 
reference to the flowchart of FIG. 50. In step S15, in 
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response to a request from the user home network 5. the 
secure container creation section 44 of the service provider 
3 transmits a service -provider secure container to the user 
home network 5 via the network 4. The details of this 
transmission processing will be described later with 
reference to the flowchart of FIG. 52. In step S16, the 
charging processing module 72 of the user home network 5 
performs charging processing. The details of this charging 
processing will be described later with reference to the 
flowchart of FIG. 54. In step S17. the user reproduces the 
content on the apparatus of the user home network 5. The 
details of this reproduction processing will be described 
later with reference to the flowchart of FIG. 55. 
[0099] Processing performed by the content provider 2 in 
order to encrypt and transmit a handling policy is shown by 
the flowchart of FIG. 35. In step S21, the content -provider 
management section 12 of the EMD service center 1 transmits 
distribution keys Kd to the content provider 2. In step S22, 
the service -provider management section 11 of the EMD service 
center 1 transmits distribution keys Kd to the service 
provider 3. Processing performed in subsequent steps S23 to 
S28 is similar to that performed in steps S12 to S17 of FIG. 
24, and hence repeated description is omitted. 
[0100] FIG. 36 is a flowchart used for describing the 
details of processing corresponds to step Sll of FIG. 34 and 
step S21 of FIG. 35. In this processing, the EMD service 
center 1 transmits distribution . keys Kd to the content 
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provider 2, and the content provider 2 receives them. In 
step S31, the mutual authentication section 17 of the EMD 
service center 1 mutually authenticates with the mutual 
authentication section 39 of the content provider 2. The 
details of this mutual authentication processing will be 
described later with reference to the flowchart of FIG. 37. 
When, through the mutual authentication processing, the 
content provider 2 has been confirmed to be an authorized 
provider, in step S32 the encryption section 34 and the 
encryption section 36 of the content provider 2 receive the 
distribution keys Kd transmitted from the content -provider 
management section 12 of the EMD service center 1. In step 
S33, the encryption section 34 of the content provider 2 
stores the received distribution keys Kd. 

[0101] As described above, the content provider 2 receives 
the distribution keys Kd from the EMD service center 1. 
Similarly, in an example case in which processing of the 
flowchart shown in FIG. 35 is performed, not only the content 
provider 2 but also the service provider 3 receives the 
distribution keys Kd from the EMD service center 1, through 
processing similar to that shown in FIG. 36. 

[0102] Next, the mutual authentication processing, which is 
performed in step S31 of FIG. 36 in order to confirm that 
so-called disguisement is not present, will be described with 
reference to three example cases; i.e., a case in which a 
single common key is used (FIG. 37), a case in which two 
common keys are used (FIG. 38), and a case in which a public 
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key cryptosystem is used (FIG. 39). 

[0103] FIG. 37 is a flowchart showing mutual authentication 
operation which the mutual authentication section 39 of the 
content provider 2 and the mutual authentication section 17 
of the EMD service center 1 perform while using a single 
common key of DES. which is a common key cryptosystem. In 
step S41, the mutual authentication section 39 of the content 
provider 2 generates a random number Rl of 64 bits (the 
random-number generation section 35 may generate the random 
number). In step S42. the mutual authentication section 39 
of the content provider 2 encrypts the random number Rl by 
use of a previously stored common key Kc, in accordance with 
the DES (the encryption section 36 may perform this 
encryption). In step S43, the mutual authentication section 
39 of the content provider 2 transmits the encrypted random 
number Rl to the mutual authentication section 17 of the EMD 

service center 1. 1 
[0104] In step S44, the mutual authentication section 17 of 
the EMD service center 1 decrypts the received random number 
Rl by use of the previously stored common key Kc. In step 

545, the mutual authentication section 17 of the EMD service 
center 1 generates a random number R2 of 32 bits. In step 

546, the mutual authentication section 17 of the EMD service 
center 1 replaces lower 32 bits of the decrypted 64-bit 
random number Rl with the random number R2 to thereby 
generate a concatenated number R1„||R2. Here. Ri H represents 
the upper bits of Ri, and A||B represents a concatenation of 
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A and B (where B having m bits is joined to a lower portion 
of A having n bits to thereby obtain a number of (n+m) bits). 
In step S47, the mutual authentication section 17 of the EMD 
service center 1 encrypts the concatenated number R1 H | |R2 by 
use of the common key Kc in accordance with the DES. In step 
S48, the mutual authentication section 17 of the EMD service 
center 1 transmits the encrypted R1 H | |R2 to the content 
provider 2 . 

[0105] In step S49, the mutual authentication section 39 of 
the content provider 2 decrypts the received R1 H | | R2 by use 
of the common key Kc. In step S50, the mutual authentication 
section 39 of the content provider 2 investigates the upper 
32 bits R1 H of the decrypted concatenated number R1 H ||R2 and 
authenticates that the EMD service center 1 is an authorized 
center, when the upper 32 bits R1 H coincide with the upper 32 
bits R1 H of the random number Rl generated in step S41. When 
the generated random number R1 H does not coincide with the 
received R1 H , the processing is ended. When they coincide 
with each other, in step S51, the mutual authentication 
section 39 of the content provider 2 generates a random 
number R3 of 32 bits. In step S52, the mutual authentication 
section 39 of the content provider 2 generates a concatenated 
number R2||R3, while using the received and decrypted 32-bit 
random number as an upper half of the concatenated number and 
the generated random number R3 as a lower half of the 
concatenated number. In step S53, the mutual authentication 
section 39 of the content provider 2 encrypts, the 
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concatenated number R2 | | R3 by use of the common key Ks in 
accordance with the DES. In step S54 # the mutual 
authentication section 39 of the content provider 2 transmits 
the encrypted concatenation number R2 | | R3 to the mutual 
authentication section 17 of the EMD service center 1. 
[0106] In step S55, the mutual authentication section 17 of 
the EMD service center 1 decrypts the received concatenated 
number R2 1 | R3 by use of the common key Kc. In step S56, the 
mutual authentication section 17 of the EMD service center 1 
investigates the upper 32 bits of the decrypted concatenated 
number R2 | | R3 and authenticates that the content provider 2 . 
is an authorized provider, when the upper 32 bits coincide 
with the random number R2 . When the upper 32 bits do not 
coincide with the random number R2 , the content provider 2 is 
Judged to be an unauthorized provider, and the processing is 
ended. 

[0107] FIG. 38 is a flowchart showing mutual authentication 
operation which the mutual authentication section 39 of the 
content provider 2 and the mutual authentication section 17 
of the EMD service center 1 perform while using two common 
keys Kcl and Kc2 in accordance with DES, which is a common 
key cryptosystem. In step S61, the mutual authentication 
section 39 of the content provider 2 generates a random 
number Rl of 64 bits. In step S62, the mutual authentication 
section 39 of the content provider 2 encrypts the random 
number Rl by use of a previously stored common key Kcl in 
accordance with the DES.. In step S63, the mutual 



53 




authentication section 39 of the content provider 2 transmits 
the encrypted random number Rl to the EMD service center 1 . 
[0108] In step S64, the mutual authentication section 17 of 
the EMD service center 1 decrypts the received random number 
Rl by use of the previously stored common key Kcl . In step 
S65 # the mutual authentication section 17 of the EMD service 
center 1 encrypts the random number Rl by use of a previously 
stored common key Kc2. In step S66, the mutual 
authentication section 17 of the EMD service center 1 
generates a random number R2 of 64 bits.. In step S67, the 
mutual authentication section 17 of the EMD service center 1 
encrypts the random number R2 by use of the common key Kc2 . 
In step S68, the mutual authentication section 17 of the EMD 
service center 1 transmits the encrypted random numbers Rl 
and R2 to the mutual authentication section 39 of the content 
provider 2 . 

[0109] In step S69, the mutual authentication section 39 of 
the content provider 2 decrypts the received random numbers 
Rl and R2 by use of the previously stored common key Kc2 . In 
step S70, the mutual authentication section 39 of the content 
provider 2 investigates the decrypted random number Rl and 
authenticates that the EMD service center 1 is an authorized 
center, when the decrypted random number Rl coincides with 
the random number Rl generated in step S61 (random number Rl 
before being subjected to encryption). When they do not 
coincide with each other, the EMD service center 1 is judged 
to be an unauthorized center, and the processing is ended. 
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In step S71, the mutual authentication section 39 of the 
content provider 2 encrypts with the common key Kcl the 
random number R2 obtained through decryption. In step S72, 
the mutual authentication section 39 of the content provider 
2 transmits the encrypted random number R2 to the EMD service 
center 1 . 

[0110] In step S73, the mutual authentication section 17 of 
the EMD service center 1 decrypts the received random number 
R2 by use of the common key Kcl. In step S74, the mutual 
authentication section 17 of the EMD service center 1 
authenticates that the content provider 2 is an authorized 
provider, when the decrypted random number R2 coincides with 
the random number R2 generated in step S66 (random number R2 
before being subjected to encryption). When they do not ^ 
coincide with each other, the content provider 2 is judged to 
be an unauthorized provider, and the processing is ended. 
[0111] FIG. 39 is a flowchart showing mutual authentication 
operation performed by the mutual authentication section 39 
of the content provider 2 and the mutual authentication 
section 17 of the EMD service center 1 while using an 
elliptic-curve cryptosystem of 160-bit length, which is a 
public key cryptosystem. In step S81, the mutual 
authentication section 39 of the content provider 2 generates 
a random number Rl of 64 bits. In step S82, the mutual 
authentication section 39 of the content provider 2 transmits 
to the mutual authentication section 17 of the EMD service 
center 1 the random number Rl and a certificate which has 
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been obtained in advance from an authentication office and 
which includes a public key Kpcp of the content provider 2 . 
[0112] In step S83, the mutual authentication section 17 of 
the EMD service center 1 decrypts the signature of the 
received certificate (having been encrypted by use of a 
private key Ksca of the authentication office) by use of a 
public key Kpca of the authentication office which has been 
obtained in advance, to thereby extract hash values of the 
public key Kpcp of the content provider 2 and the name of the 
content provider 2. The mutual authentication section 17 of 
the EMD service center 1 extracts the public key Kpcp of the 
content provider 2 and the name of the content provider 2, 
which are stored in the form of plain text. If the 
certificate is a proper one issued by the authentication 
office, decryption of the signature of the certificate is 
possible; and the hash values of the public key Kpcp of the 
content provider 2 and the name of the content provider 2 
coincide with hash values obtained as a result of applying a 
hash function to the public key Kpcp of the content provider 
2 and the name of the content provider 2 which are stored in 
the certificate in the form of plain text. Thus, the public 
key Kpcp is authenticated to be an authorized one and not to 
have been subjected to tampering. When the signature cannot 
be decrypted or when the hash values extracted from the 
signature do not coincide with those obtained by use of a 
hash function, this means that the public key Kpcp is not an 
authorized public key, or the content provider 2 is not an 
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authorized provider. In this case, the processing is ended. 
[0113] When a proper authentication result is obtained, in 
step S84, the mutual authentication section 17 of the EMD 
service center 1 generates a random number R2 of 64 bits. In 
step S85, the mutual authentication section 17 of the EMD 
service center 1 generates a concatenated number Rl | | R2 of 
the random numbers Rl and R2 . In step S86, the mutual 
authentication section 17 of the EMD service center 1 
encrypts the concatenated number Rl | | R2 by use of the private 
key Ksesc of the EMD service center 1. In step S87, the 
mutual authentication section 17 of the EMD service center 1 
encrypts the concatenated number Rl| |R2 by use of the public 
key Kpcp of the content provider 2 obtained in step S83. In 
step S88. the mutual authentication section 17 of the EMD . 
service center 1 transmits to the mutual authentication 
section 39 of the content provider 2 the concatenated number 
Rl| |R2 encrypted by use of the private key Ksesc, the 
concatenated number Rl||R2 encrypted by use of the public key 
Kpcp, and a certificate including the public key Kpesc of the 
EMD service center 1 (which has been obtained in advance from 
the authentication office) . 

[0114] In step S89. the mutual authentication section 39 of 
the content provider 2 decrypts the signature of the received 
certificate by use of the previously obtained public key Kpca 
of the authentication office; and when the signature is 
correct, the mutual authentication section 39 extracts the 
public key Kpesc from the certificate. Since the processing 
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in this case is similar to that in step S83, its repeated 
description is omitted. In step S90, the mutual 
authentication section 39 of the content provider 2 decrypts 
the concatenated number Rl | | R2 having been encrypted by use 
of the private key Ksesc of the EMD service center 1 , by use 
of the public key Kpesc obtained in step S89. In step S91, 
the mutual authentication section 39 of the content provider 
2 decrypts the concatenated number Rl | | R2 having been 
encrypted by use of the public key Kpcp of. the content 
provider 2, by use of the private key Kscp of the content 
provider 2. In step S92, the mutual authentication section 
39 of the content provider 2 compares the concatenated number 
Rl | | R2 decrypted in step S90 and that decrypted in step S91. 
When they coincide with each other, the mutual authentication 
section 39 authenticates that the EMD service center 1 is an 
authorized one. When they do not coincide with each other, 
the mutual authentication section 39 judges that the EMD 
service center 1 is not an authorized one, and ends the 
processing. 

[0115] When a proper authentication result is obtained, in 
step S93, the mutual authentication section 39 of the content 
provider 2 generates a random number R3 of 64 bits. In step 
S94, the mutual authentication section 39 of the content 
provider 2 generates a concatenated number R2 | | R3 of the 
generated random number R3 and the random number R2 obtained 
in step S90. In step S95, the mutual authentication section 
39 of the content provider 2 encrypts the concatenated number 
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R2 I | R3 by use of the public key Kpesc obtained in step S89. 
In step 96, the mutual authentication section 39 of the 
content provider 2 transmits the encrypted, concatenated 
number R2 | | R3 to the mutual authentication section 17 of the 
EMD service center 1 . 

[0116] In step S97, the mutual authentication section 17 of 
the EMD service center 1 decrypts the encrypted, concatenated 
number R2 | | R3 by use of the private key Ksesc of the EMD 
service center 1. In step S98, the mutual authentication 
section 17 of the EMD service center 1 authenticates that the 
content provider 2 is an authorized provider, when the 
decrypted random number R2 coincides with the random number 
R2 generated in step S84 (random number R2 before being 
subjected to encryption). When they do not coincide with 
each other, the mutual authentication section 17 judges that 
the content provider 2 is not an authorized provider, and 
ends the processing. 

[0117] As described above, the mutual authentication section 
17 of the EMD service center 1 and the mutual authentication 
section 39 of the content provider 2 authenticate each other. 
Random numbers used in the mutual authentication are each 
used as a temporary key Ktemp, which is effective only in 
processing subsequent to the mutual authentication. 
[0118] FIG. 40 is a flowchart used for describing the details 
of processing corresponding to step S12 of FIG. 34 and step 
S23 of FIG. 35. In this processing, the receiver 51 performs 
registration in the user management section 18 of the EMD 
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service center 1. In step S101, on the basis of output from 
the IC-card interface 64, the SAM 62 of the receiver 51 
judges whether the IC card 55 for backup is attached to the 
receiver 51. When the IC card 55 for backup has been 
attached to the receiver 51 (e.g., a case in which the 
receiver 51 is replaced with a new receiver 51, and the data 
contained in the previous receiver 51 are stored in the IC 
card 55 in order to transfer the data of the previous 
receiver 51 to the new receiver 51), the SAM 62 proceeds to 
step S102 in order to read backup data stored in the IC card 
55. The details of this processing will be described later 
with reference to the flowchart of FIG. 45. Needless to say, 
in order to enable this read processing, the backup data must 
be stored in the IC card 55 beforehand. This backup 
processing will be described later with reference to FIG. 43. 
[0119] When in step S101 the IC card 55 is judged not to be 
attached to the receiver 51, the SAM 62 skips step S102 and 
proceeds to step S103. In step S103, the mutual 
authentication module 71 of the SAM 62 mutually authenticates 
with the mutual authentication section 17 of the EMD service 
center 1, and the SAM 62 transmits a certificate to the user 
management section 18 of the EMD service center 1. Since 
this authentication processing is similar to that having been 
described with reference to FIGS. 37 to 39, its repeated 
description is omitted here. The certificate that the SAM 62 
transmits to the user management section 18 of the EMD 
service center 1 in step S103 includes data shown in FIG. 41. 
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The certificate transmitted by the SAM 62 has a configuration 
substantially the same as that of the content provider 2 
shown in FIG. 14. However, the certificate transmitted by 
the SAM 62 further contains data indicating whether the SAM 
62 belongs to another SAM. In step S104, the SAM 62 
transmits, via the communication section 61 to the user 
management section 18 of the EMD service center 1, 
information regarding a settlement institution such as a bank 
of the user, which information has been encrypted by use of 
the temporary key Ktemp. 

[0120] In step S105, on the basis of the received ID of the 
SAM 62, the user management section 18 of the EMD service 
center 1 searches the user-registration database shown in. ..FIG. 
7. In step S106, the user management section 18 of the EMD 
service center 1 judges whether a SAM 62 having the received 
ID can be registered. When the SAM 62 can be registered, the 
user management section 18 proceeds to step S107 in order to 
Judge whether registration of the SAM 62 is new.. When it is 
judged in step S107 that the registration of the SAM 62 is 
not a new registration, the user management section 18 
proceeds to step S108. 

[0121] In step S108, the user management section 18 of the 
EMD service center 1 executes processing for update 
registration in order to search the user-registration data 
base on the basis of the received Id and to make a 
registration list. This registration list has a 
configuration as shown in FIG. 42. For each of the IDs of 
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SAMs of apparatuses, this registration list includes a 
registration denial flag indicating whether the user 
management section 18 of the EMD service center 1 has denied 
registration; a status flag which is used in a case in which 
an SAM depends on another SAM and which shows conditions for 
use of a content key Kco; a condition flag indicating whether 
the SAM depends on another SAM; and a signature. The 
signature has been obtained through encryption, with the 
private key Ksesc of the EMD service center 1 , of a hash 
value generated through application of a hash function to the 
registration denial flag, the status flag, and the condition 
flag. 

[0122] The SAM of each apparatus has a 64 -bit ID unique to 
the apparatus (indicated by hexadecimal numbers in FIG. 42) . 
When the registration denial flag is "1," this indicates that 
the user management section 18 of the EMD service center 1 
has registered an apparatus having a corresponding ID. When 
the registration denial flag is "0," this indicates that the 
user management section 18 of the EMD service center 1 has 
denied registration of an apparatus having a corresponding ID. 
[0123] When the MSB (Most Significant Bit) of the status 
flag is "1," this indicates that a child apparatus having a 
corresponding ID (e.g., the recorder 53) can receive a 
content key Kco from a parent apparatus (e.g., the receiver 
51) on which the child apparatus depends. When the MSB of 
the status flag is "0," this indicates that a child apparatus 
having a corresponding ID cannot receive a content key Kco 
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from a parent apparatus on which the child apparatus depends. 
When the second bit of the status flag as counted from the 
MSB is "l," this indicates that a child apparatus having a 
corresponding ID can receive from a parent apparatus a 
content key Kco encrypted by use of a save key Ksave of the 
parent apparatus. When the third bit of the status flag as 
counted from the MSB is "1." this indicates that a child 
apparatus having a corresponding ID can receive from a parent 
apparatus a content key Kco encrypted by use of a 
distribution key Kd. When the LSB (Least Significant Bit) of 
the status flag is "l. M this indicates that a parent 
apparatus on which a child apparatus having a corresponding 
ID depends purchases a content key Kco encrypted by use of a 
distribution key Kd, encrypts the content key Kco by use of a 
temporary key Ktemp, and passes the encrypted content key Kco 
to the child apparatus. 

[0124] When the condition flag is "0," this indicates that 
an apparatus having a corresponding ID can communicate 
directly with the user management section 18 of the EMD 
service center 1 (i.e., this indicates that the apparatus 
having a corresponding ID is a parent apparatus such as the 
receiver 51). When the condition flag is "1," this indicates 
that an apparatus having a corresponding ID cannot 
communicate directly with the user management section 18 of 
the EMD service center 1 (i.e., this indicates that the 
apparatus having a corresponding ID is a child apparatus such 
as the recorder 53). When the condition flag is "0," the 
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status flag is set to "0000" at all times. 

[0125] In step S109, the user management section 18 of the 
EMD service center 1 transmits to the SAM 62 of the receiver 
51 a distribution key Kd which has been supplied from the key 
server 14 and encrypted by use of a temporary key Ktemp 
supplied from the mutual authentication section 17. In step 
S110, the SAM 62 of the receiver 51 decrypts the received 
distribution key Kd by use of the temporary key Ktemp and 
stores it in the storage module 73. 

[0126] In step Sill, the user management section 18 of the 
EMD service center 1 transmits to the SAM 62 of the receiver 
51 the registration list encrypted by use of the temporary 
key Ktemp. In step S112, the SAM 62 of the receiver 51 
decrypts the received registration list by use of the 
temporary key Ktemp and stores it in the storage module 73. 
Subsequently, the processing is ended. 

[0127] When it is judged in step S107 that the registration 
of the SAM 62 is. a new registration, the user management 
section 18 of the EMD service center 1 proceeds to step S114 
to perform processing for new registration and produce a 
registration list. Subsequently, the user management section 
18 proceeds to step S109. 

[0128] When it is judged in step S106 that registration. of a 
SAM having the received ID is impossible, the user management 
section 18 of the EMD service center 1 proceeds to step S113 
to produce a registration list for registration denial. 
Subsequently, the user management section 18 proceeds to step 
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Sill . 

[0129] In the above -described manner, the receiver 51 is 
registered in the EMD service center 1. 

[0130] Next, with reference to the flowchart of FIG. 43, 
there will be described the details of processing for storing 
in the IC card 55 predetermined data, such as a distribution 
key, which are stored in the storage module 73 of the 
receiver 51 having been used up to the present. In step S121, 
the mutual authentication module 71 of the SAM 62 mutually 
authenticates with the mutual authentication module 80 of the 
IC card 55. Since this mutual authentication is the same as 
that described with reference to FIGS. 37 to 39, repeated 
description is omitted here. In step S122, the random-number 
generation unit 92 of the SAM 62 generates a random number 
used as a backup key Kic. In step S123, the encryption unit 
93 of the SAM 62 encrypts the ID number of the SAM, the save 
key Ksave, and the ID of the HDD 52, which are stored in the 
storage module 73, by use of the backup key Kic. In step 
S124, the encryption unit 93 of the SAM 62 encrypts the 
backup key Kic by use of the public key Kpesc of the EMD 
service center 1 (the SAM 62 has already obtained the public 
key Kpesc of the EMD service center 1 during authentication 
processing performed with the EMD service center 1 (step S89 
in FIG. 39)). In step S125, the SAM 62 of the receiver 51 
transmits, via the IC-card interface 64 to the IC card 55, 
the encrypted ID number of the SAM, the encrypted save key 
Ksave, the encrypted ID of the HDD 52, and the encrypted 



65 



backup key Kic, to thereby store them in the storage module 
81. 

[0131] As described above, the ID number of the SAM, the 
save key Ksave, and the ID of the HDD 52, which are stored in 
the storage module 73 of the SAM 62, are encrypted by use of 
the backup key Kic, and stored in the storage module 81 of 
the IC card 55, together with the backup key Kic, which is 
encrypted by use of the public key Kpesc of the EMD service 
center 1. 

[0132] With reference to the flowchart of FIG. 44, there 
will be described the details of other processing for storing 
in the IC card 55 predetermined data, such as a distribution 
key, which are stored in the storage module 73 of the 
receiver 51 having been used up to the present. In step 131, 
the mutual authentication module 71 of the SAM 62 mutually 
authenticates with the mutual authentication module 80 of the 
IC card 55. In step S132, the encryption unit 93 of the SAM 
62 encrypts the ID number of the SAM, the save key Ksave, and 
the ID of the HDD 52, which are stored in the storage module 
73, by use of the public key Kpesc of the EMD service center 
1. In step S133, the SAM 62 of the receiver 51 transmits, 
via the IC-card interface 64 to the IC card 55, the encrypted 
ID number of the SAM, the encrypted save key Ksave, and the 
encrypted ID of the HDD 52, to thereby store them in the 
storage module 81. 

[0133] The processing shown in FIG. 44, which is simpler 
than that shown in FIG. 43, enables the ID number of the SAM, 
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the save key Ksave, and the ID of the HDD 52 to be stored in 
the storage module 81 of the IC card 55 after being encrypted 
by use of the public key Kpesc of the EMD service center 1 . 
[0134] As described above, the backup data stored in the IC 
card 55 are read into the new receiver 51 by the processing 
in step S102 of FIG. 40. FIG. 45 is a flowchart used for 
describing processing for reading the backup data which have 
been stored in the IC card 55 by the processing shown in FIG. 
43. In step 141, the mutual authentication module 71 of the 
SAM 62 of the new receiver 51 mutually authenticates with the 
mutual authentication module 80 of the IC card 55. Since 
this mutual authentication is the same as that described with 
reference to FIGS. 37 to 39 , repeated description is omitted 
here . 

[0135] In step S142, the SAM 62 reads via the IC-qard 
interface 64 from the storage module 81 data which was stored 
in the storage module 73 of the previous receiver 51 and 
encrypted by use of the backup key Kic (backup data of the ID 
number of the SAM, the save key Ksave, and the ID of the HDD 
52), and the backup key Kic encrypted by use of the public 
key Kpesc of the EMD service center 1. In step S143, the 
mutual authentication module 71 of the SAM 62 mutually 
authenticates with the mutual authentication section 17 of 
the EMD service center 1 via the communication section 61. 
Since this mutual authentication is the same as that 
described with reference to FIGS. 37 to 39, repeated 
description is omitted here. In step S144, the SAM 62 
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transmits, via the communication section to the user 
management section 18 of the EMD service center 1, the data 
of the storage module 73 encrypted by use of the backup key 
Kic, as well as the backup key Kic encrypted by use of the 
public key Kpesc of the EMD service center 1. 
[0136] In step S145, the user management section 18 of the 
EMD service center 1 decrypts the received backup key Kic by 
use of the private key Ksesc of the EMD service center 1. In 
step S146, the user management section 18 of the EMD service 
center 1 decrypts the received backup data by use of the 
backup key Kic. In step S147, the user management section 18 
of the EMD service center 1 encrypts the decrypted backup 
data by use of the temporary key Ktemp supplied from the 
mutual authentication section 17. In step S148, the user 
management section 18 of the EMD service center 1 transmits 
to the communication section 61 of the user home network 51 
the backup data encrypted by use of the temporary key Ktemp. 
[0137] In step S149, the communication section 61 of the 
user home network 51 transmits to the SAM 62 the data 
received from the user management section 18 of the EMD 
service center 1. The SAM 62 decrypts the data and then 
stores them in the storage module 73. In step S150, the. user 
management section 18 of the EMD service center 1 modifies 
the data in the user-registration database (FIG. 7) 
corresponding to the ID of the SAM 62 of the previous 
apparatus from which data was transferred to the IC card 55, 
such that the modified data indicate un-registerable . 
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[0138] As described above, the new receiver 51 reads the 
backup data from the IC card 55. 

[0139] With reference to the flowchart shown in FIG. 46, 
there will be described processing for reading the backup 
data which have been stored in the IC card 55 by the 
processing shown in FIG. 44. In step S161, the mutual 
authentication module 71 of the SAM 62 of the new receiver 51 
mutually authenticates with the mutual authentication module 
80 of the IC card 55. Since this mutual authentication is 
the same as that described with reference to FIGS. 37 to 39, 
repeated description is omitted here. In step S162, the SAM 
62 reads via the IC-card interface 64 data which was stored 
in the storage module 73 of the previous receiver 51 and 
encrypted by use of the public key Kpesc of the EMD service 
center 1 (backup data of the ID number of the SAM, the save 
key Ksave. and the ID of the HDD 52). _ 
[0140] In step S163, the mutual authentication module 71 of 
the SAM 62 mutually authenticates with the mutual 
authentication section 17 of the EMD service center 1 via the 
communication section 61. Since this mutual authentication 
is the same as that described with reference to FIGS. 37 to 
39, repeated description is omitted here. In step S164, the 
SAM 62 transmits, via the communication section 61 to the 
user management section 18 of the EMD service center 1, the 
data of the storage module 73 encrypted by use of the public 
key Kpesc of the EMD service center 1. 

[0141] In step S165, the user management section 18 of the 
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EMD. service center 1 decrypts the data of the storage module 
73 by use of the private key Ksesc of the EMD service center 
1. In step S166, the user management section 18 of the EMD 
service center 1 encrypts the decrypted backup data by use of 
the temporary key Ktemp supplied from the mutual 
authentication section 17. In step S16 7, the user management 
section 18 of the EMD service center 1 transmits to the 
communication section 61 of the user home network 51 the 
backup data encrypted by use of the temporary key Ktemp. 
[0142] In step S168, the communication section 61 of the 
receiver 51 transmits to the SAM 62 the data received from 
the user management section 18 of the EMD service center 1. 
The SAM 62 decrypts the data and then stores them in the 
storage module 73. In step S169, the user management section 
18 of the EMD service center 1 modifies the data in the user- 
registration database (FIG. 7) corresponding to the ID of the 
SAM 62 of the previous apparatus from which data was 
transferred to the IC card 55, such that the modified data 
indicate un-registerable . 

[0143] As described above, when the backup is performed by 
use of the processing shown in FIG. 44, the new receiver 51 
reads the backup data from the IC card 55 through the 
processing shown in FIG. 46. 

[0144] When the receiver 51 registers itself (when the 
receiver 51 perform processing corresponding to step S12 of 
FIG. 34), the receiver 51 performs the processing shown in 
the flowchart of FIG. 40. When the receiver 51 registers the 
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recorder 53 depending on the receiver 51 in the EMD service 
center 1. the receiver 51 performs the processing shown in 
the flowchart of FIG. 47. In step S181. the SAM 62 of the 
receiver 51 writes the ID of the recorder 53 into the 
registration list stored in the storage module 73. In step 
S182, the mutual authentication module 71 of the receiver 51 
mutually authenticates with the mutual authentication section 
17 of the EMD service center 1. Since this mutual 
authentication is the same as that described with reference 
to FIGS. 37 to 39, repeated description is omitted here. 
[0145] In step S183. on the basis of the ID of the receiver 
51 (the ID of the SAM 62 contained in the certificate of the 
SAM 62 shown in FIG. 41), the user management section 18 of 
the EMD service center 1 searches the user-registration 
database and judges whether the receiver 51 is un- 
registerable. When the receiver 51 is judged not to be un- 
registerable, the processing proceeds to step S184. In step 
184, the SAM 62 of the receiver 51 encrypts, by use of the 
temporary key Kd, the version of the distribution key Kd, 
charging information (stored by the processing in step S337 
of the flowchart shown in FIG. 54, which will be described 
later), and the registration list, which are stored in the 
storage module 73. Further, the SAM 62 encrypts the handling 
policy stored in the HDD 52 by use of the temporary key Kd. 
Subsequently, the SAM 62 transmits via the communication 
section 61 to the user management- section 18 of the EMD 
service center 1 the version of the distribution key. Kd, the 
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charging information, and the registration list, which are 
stored in the storage module 73, as well as the handling 
policy stored in the HDD 52. In step S185, the user 
management section 18 of the EMD service center 1 decrypts 
the received data and processes the charging information. 
Subsequently, the user management section 18 updates the data 
portion (e.g., the registration denial flag and the status 
flag) which relates to the recorder 53 and which is contained 
in the registration list received from the receiver 51. The 
user management section 18 then attaches to the updated 
registration list a signature corresponding to the data 
corresponding to the receiver 51. 

[0146] In step S186, the user management section 18 of the 
EMD service center 1 judges whether the version of the 
distribution key Kd which the receiver 51 holds is the latest. 
When the version of the distribution key Kd held by the 
receiver 51 is judged to be the latest, in step S187, the 
user managemient section 18 transmits to the receiver 51 the 
updated registration list and a charging- information receipt 
message, which have been encrypted by use of the temporary 
key Kd. The receiver 51 receives the updated registration 
list and the charging- information receipt message, decrypts 
them, and stores them. In step S188, the receiver 51 erases 
the charging information stored in the storage module 73, and 
replaces the stored registration list with the registration 
list received from the user management section 18 of the EMD 
service center 1 in step S187. Subsequently , _ the processing 
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proceeds to step S191. 

[0147] When it is judged in step S186 that the version of 
the distribution key Kd held by the receiver 51 is not the 
latest, in step S189, the user management section 18 of the 
EMD service center 1 transmits to the receiver 51 a 
distribution key of the latest version, the updated 
registration list, and the charging-inf ormation receipt 
message, which have been encrypted by use of the temporary 
key Kd. The receiver 51 receives the distribution key of the 
latest version, the updated registration list, and the 
charging information receipt message, decrypts them, and 
stores them. In step S190. the receiver 51 erases the 
charging information stored in the storage module 73, 
replaces the stored registration list with the registration 
list received from the user management section 18 of the EMD 
service center 1 in step S189, and replaces the previous _ 
distribution key Kd with the distribution key of the latest 
version. Subsequently, the processing proceeds to step S191. 
[0148] In step S191, with reference to the updated 
registration list, the SAM 62 of the receiver 51 judges 
whether the recorder 53 is un-registerable . When the 
recorder 53 is judged not to be un-registerable, in step S192, 
the receiver 51 and the recorder 53 mutually authenticate and 
share the temporary key Ktemp. Since this authentication 
processing is similar to that having been described with 
reference to FIGS. 37 to 39. repeated description is omitted 
here. In step S193. the receiver 51 transmits to the 
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recorder 53 a registration completion message and the 
distribution key Kd, which have been encrypted by use of the 
temporary key Kd. The recorder 53 receives the registration 
completion message and the distribution key Kd, and decrypts 
them. In step S194, the recorder 53 updates the distribution 
key Kd, after which the processing ends. 

[0149] The processing ends when it is judged in step S183 
that the receiver 51 is un-registerable , or when it is judged 
in step S191 that the recorder 53 is un-registerable. 
[0150] As described above, the recorder 53 depending on the 
receiver 51 is registered in the EMD service center 1 via the 
receiver 51. 

[0151] FIG. 48 is a flowchart showing the details of the 
processing which is performed in step S13 of FIG. 34 in order 
to enable the receiver 51 to receive a distribution key Kd 
which is transmitted from the EMD service center 1 to the 
receiver 51. In step S201, the mutual authentication module 
71 of the receiver 51 mutually authenticates with the mutual 
authentication section 17 of the EMD service center 1. Since 
this authentication processing is similar to that having been 
described with reference to FIGS. 37 to 39, repeated 
description is omitted here. In step S202, the SAM 62 of the 
receiver 51 transmits a certificate to the user management 
section 18 of the EMD service center 1; and the user 
management section 18 of the EMD service center 1 receives 
the certificate. Since the processing in steps S203 to S210 
is the same as that in steps S183 to S190 of FIG. 47, 
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repeated descriptions are omitted here. 
[0152] As described above, the receiver 51 receives a 
distribution key Kd from the user management section 18 of 
the EMD service center 1 and transmits charging information 
of the receiver 51 to the user management section 18 of the 
EMD service center 1. 

[0153] Next, with reference to the flowchart of FIG. 49, 
there will be described the details of the processing which 
enables the recorder 53 depending on the receiver 51 to 
receive a distribution key Kd (when the status flag shown in 
FIG. 42 has a value indicating that the recorder 53 is 
permitted to receive a distribution key Kd) . In step S221, 
the mutual authentication module 71 of the receiver 51 and an 
unillustrated mutual authentication module of the recorder _5 3 
mutually authenticate. Since this authentication processing 
is similar to that having been described with reference to . 
FIGS. 37 to 39, repeated description is omitted here. 
[0154] In step S222, the receiver 51 judges whether the data 
of the recorder 53 are included in the registration list 
stored in the storage module 73 of the receiver 51. When it 
is judged that the data of the recorder 53 are included in 
the registration list stored in the storage module 73 of the 
receiver 51, in step S2 2 3, the receiver 51 judges whether the 
recorder 53 is un-registerable , with reference to the 
registration list stored in the storage module 73. When it 
is judged in step S223 that the recorder 53 is not un- 
registerable, in step S224. the SAM 66 of the recorder 53 
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encrypts, by use of the temporary key Ktemp, the version of 
the distribution key Kd stored in the internal storage module 
(which has been received from the receiver 51 in step S235 of 
FIG. 49, which will be described later) and charging 
information (which has been stored through processing 
corresponding step S337 of the processing corresponding to 
FIG. 54, which will be described later). Subsequently, the 
SAM 66 of the recorder 53 sends them to the SAM 62 of the 
receiver 51. The SAM 62 of the receiver 51 receives and 
decrypts the version of the distribution key Kd and the 
charging information. 

[0155] In step S225, the mutual authentication module 71 of 
the receiver 51 mutually authenticates with the mutual 
authentication section 17 of the EMD service center 1 via the 
communication section 61. Since this authentication 
processing is similar to that having been described with 
reference to FIGS. 37 to 39, repeated description is omitted 
here. In step S226, on the basis of the ID of the receiver 
51, the user management section 18 of the EMD service center 
1 searches the user-registration database and judges whether 
the receiver 51 is un-registerable. When the receiver 51 is 
judged not to be un-registerable, processing proceeds to step 
S227. In step 227, the SAM 62 of the receiver 51 encrypts, 
by use of the temporary key Kd, the version of the 
distribution key Kd, the charging information, and the 
registration list, which are stored in the storage module 73. 
Further, the SAM 62 encrypts the handling policy stored in 
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the HDD 52 and the charging information of the recorder 53 by 
use of the temporary key Kd. Subsequently, the SAM 62 
transmits these data to the user management section 18 of the 
EMD service center 1 via the communication section 61. In 
step S228. the user management section 18 of the EMD service 
center 1 decrypts the received data and processes the 
charging information. Subsequently, the user management 
section 18 updates the data portion (e.g., the registration 
denial flag and the status flag) which relates to the 
recorder 53 and which is contained in the registration list 
received from the receiver 51, as has been described in 
relation to FIG. 42. The user management section 18 then 
attaches to the updated registration list a signature 
corresponding to the data corresponding to the receiver 51. 
[0156] Since the processing in steps S229 to S234 is the 
same as that in steps S186 to S191 of FIG. 47, repeated , 
description is omitted here. 

[0157] In step S234, with reference to the updated 
registration list, the SAM 62 of the receiver 51 judges 
whether the recorder 53 is un-registerable . When the 
recorder 53 is judged not to be un-registerable, in step S235, 
the receiver 51 transmits to the recorder 53 a charging - 
information receipt message and the distribution key Kd, 
which have been encrypted by use of the temporary key Kd. 
The recorder 53 receives the charging -information receipt 
message and the distribution key Kd, and decrypts them. In 
step S236, the SAM 66 of the recorder 53 erases the charging 
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information stored in the internal storage module, and 
replaces the stored distribution key Kd with the distribution 
key Kd of the latest version. 

[0158] When it is judged in step S222 that the data of the 
recorder 53 are not included in the registration list stored 
in the storage module 73 of the receiver 51, in step S237, 
the processing shown in FIG. 47 for registering the recorder 
53 is executed. Processing then proceeds to step S224. 
[0159] The processing ends when it is judged in step S223 
that the recorder 53 is un-registerable , when it is judged in 
step S226 that the receiver 51 is un-registerable, or when it 
is judged in step S234 that the recorder 53 is un- 
registerable. 

[0160] As described above, the recorder 53 depending on the 
receiver 51 receives the distribution key Kd via the receiver 
51. 

[0161] Next, with reference to the flowchart of FIG. 50, 
there will be described the processing which corresponds to 
step S14 of FIG. 34 and which enables the content provider 2 
to transmit a content -provider secure container to the 
service provider 3 . In step S251, the watermark adding 
section 32 of the content provider 2 inserts into content 
supplied from the content server 31 a predetermined watermark 
indicating the content provider 2, and sends it to the 
compression section 33. In step S252, the compression 
section 33 of the content provider 2 compresses the content 
in which the watermark has been inserted, in accordance with 
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ATRAC 2 or any other scheme and supplies the compressed 
content to the encryption section 34. In step S253, the 
random-number generation section 35 generates a random number 
which is used as a content key Kco, and outputs it to the 
encryption section 34 . In step S254, the encryption section 
34 of the content provider 2 encrypts the content into 
which the watermark has been inserted and which has been 
compressed, by use the content key Kco and in accordance with 
a predetermined scheme such as DES. 

[0162] In step S255, the encryption section 36 encrypts the 
content key Kco in accordance with a predetermined scheme 
such as DES and by use of the distribution key Kd which has 
been supplied from the EMD service center 1 through the 
processing in step Sll of FIG. 34. In step S256, the secure 
container creation section 38 of the content provider 2 
applies a hash function to the encrypted content, the 
encrypted content key Kco, and the handling policy supplied 
from the policy storage section 37, in order to obtain a hash 
value, and then encrypts it by use of a private key Kscp of 
the content provider 2. Thus, a signature as shown in FIG. 
13 is created. In step S257. the secure container creation 
section 38 of the content provider 2 creates a content- 
provider secure container as shown in FIG. 13, which includes 
the encrypted content, the encrypted content key Kco. and the 
handling policy supplied from the policy storage section 37. 
as well as the signature generated in step S256. 
[0163] In step S258, the mutual authentication section 39 of 
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the content provider 2 mutually authenticates with the mutual 
authentication section 45 of the service provider 3. Since 
this mutual authentication is the same as that described with 
reference to FIGS. 37 to 39, repeated description is omitted 
here. In step S259, the secure container creation section 38 
of the content provider 2 attaches to the content -provider 
secure container a certificate issued by the authentication 
office in advance and then transmits it to the service 
provider 3. Subsequently, the secure container creation 
section 38 ends the processing. 

[0164] In the above -described manner, the content provider 2 
transmits a content -provider secure container to the service 
provider 3 . 

[0165] Next, with reference to the flowchart of FIG. 51, 
there will be described the details of other processing which 
enables the content provider 2 to transmit a content -provider 
secure container to the service provider 3, wherein not only 
the content key Kco but also the handling policy is encrypted 
by use of the distribution key Kd. Since the processing in 
steps S271 to S274 is the same as that in steps S251 to S254 
of FIG. 50, repeated description is omitted here. In step 
S275, the encryption section 36 of the content provider 2 
encrypts the content key Kco and the handling policy supplied 
from the policy storage section 73, in accordance with a 
predetermined scheme such as DES and by use of the 
distribution key Kd which has been supplied from the EMD 
service center 1 through the processing in step S21 of FIG. 
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35 . 

[0166] In step S276, the secure container creation section 
38 of the content provider 2 applies a hash function to the 
encrypted content, the encrypted content key Kco, and the 
encrypted handling policy in order to obtain a hash value, 
and then encrypts it by use of a private key Kscp of the 
content provider 2. Thus, a signature as shown in FIG. 25 is 
created. In step S277, the secure container creation section 
38 of the content provider 2 creates a content -provider 
secure container as shown in FIG. 25, which includes the 
encrypted content, the encrypted content key Kco, and the 
encrypted handling policy, as well as the signature. The 
processing in step S278 is the same as that in step S258 of 
FIG. 50, and the processing in step S279 is the same as that 
in step S259 of FIG. 50. Therefore, repeated descriptions 
are omitted. 

[0167] In the above -described manner, the content provider 2 
transmits to the service provider 3 a content-provider secure 
container containing the encrypted handling policy. 
[0168] Next, with reference to the flowchart of FIG. 52, 
there will be described the details of the processing which 
corresponds to step S15 of FIG. 34 and which enables the 
service provider 3 to transmit a service -provider secure 
container to the receiver 51. In step S291, the pricing 
section 42 of the service provider 3 checks the signature 
contained in the certificate which is attached to the 
content -provider secure container transmitted from the secure 
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container creation section 38 of the content provider 2. 
When the certificate has not been subjected to tampering, the 
pricing section 42 extracts the public key Kpcp of the 
content provider 2 . Since the processing for checking the 
signature of the certificate is the same as that in step S83, 
repeated description is omitted here. 

[0169] In step S292, the pricing section 42 of the service 
provider 3 decrypts, by use of the public key Kpcp of the 
content provider 2, the signature of the content -provider 
secure container transmitted from the secure container 
creation section 38 of the content provider 2, to thereby 
obtain a hash value. Subsequently, the pricing section 42 
confirms that the thus -obtained hash value coincides with the 
hash value which is obtained through application of the hash 
function to the encrypted content, the encrypted content key 
Kco, and the handling policy, thereby confirming that the 
content -provider secure container has not been subjected to 
tampering: When it is found that the content -provider secure 
container has been subjected to tampering, the pricing 
section 42 ends the processing. 

[0170] When the content -provider secure container has not 
been subjected to tampering, in step S293, the pricing 
section 42 of the service provider 3 extracts the handling 
policy from the content -provider secure container. In step 
S294, on the basis of the handling policy, the pricing 
section 42 of the service provider 3 produces price 
information, which has been described in relation to FIG. 17. 
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In step S295, the secure container creation section 44 of the 
service provider 3 produces a service -provider secure 
container as shown in FIG. 15. The service -provider secure 
container includes an encrypted content, an encrypted content 
key Kco. a handling policy, and price information, and a 
signature which is a value obtained through encryption, by 
use of its own private key Kssp. of a hash value which is 
obtained through application of a hash function to the 
encrypted content, the encrypted content key Kco. the 
handling policy, and the price information. 

[0171] In step S296, the mutual authentication section 45 of 
the service provider 3 mutually authenticates with the mutual 
authentication module 71 of the receiver 51. Since this 
mutual authentication is the same as that described with 
reference to FIGS. 37 to 39, repeated description is omitted 
here. In step S297. the secure container creation section 44 
of the service provider 3 transmits to the communication 
section 61 of the receiver 51 the service -provider secure 
container to which the certificate has been attached. 
Subsequently, the secure container creation section 44 ends 
the processing. 

[0172] In the above -described manner, the service provider 3 
transmits a service -provider secure container to the receiver 
51. 

[0173] Next, with reference to the flowchart of FIG. 53, 
there will be described the details of the processing which 
enables the service provider 3 to transmit a service -provider 



83 




secure container to the receiver 51, wherein the handling 
policy is encrypted by use of the distribution key Kd in the 
content provider 2 , and the service provider 3 produces 
handling control information. Since processing in step S311 
and processing in step S312 are the same as those in steps 
S291 and S292 of FIG. 52, repeated descriptions are omitted 
here. In step S313, the pricing section 42 of the service 
provider 3 decrypts the encrypted handling policy contained 
in the content -provider secure container. In step S314, on 
the basis of the handling policy, the pricing section 42 of 
the service provider 3 produces the handling control 
information which has been described in relation to FIG. 23. 
Since processing in step S3 15 through step S318 is the same 
as that in steps S294 through S297 of FIG. 52, repeated 
description is omitted. 

[0174] As described above, the service provider 3 transmits 
to the receiver 51 a service-provider secure container 
containing the encrypted handling policy. 

[0175] Next, with reference to the flowchart of FIG. 54, 
there will be described the processing which corresponds to 
step S16 of FIG. 34 and which enables the receiver 51 to 
perform charging processing after reception of a proper 
service-provider secure container. In step S331, the 
decryption/encryption module 74 of the receiver 51 judges 
whether the content key Kco can be decrypted by use of the 
distribution key Kd. When it is judged that the content key 
Kco cannot be decrypted by use of the distribution key Kd, in 
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step S332, the receiver 51 executes the processing for 
receiving the distribution key Kd, which has been described 
in relation to FIG. 48, and then proceeds to step S333. When 
it is judged in step S331 that the content key Kco can be 
decrypted by use of the distribution key Kd, the processing 
skips step S332 and proceeds to step S333. In step S333, the 
decryption unit 91 of the receiver 51 decrypts the content 
key Kco by use of the distribution key Kd, which has been 
stored in the storage module 73 through processing in step 
S13 of FIG. 34. 

[0176] In step S334, the charging processing module 72 of 
the receiver 51 extracts the handling policy and the price 
information from the service -provider secure container and 
produces the charging information and the conditions -for-use 
information, which have been described with reference to FIGS. 
19 and 20, respectively. In step S335, the charging 
processing module 72 of the receiver 51 judges whether the 
current charge is greater than the upper limit of charge, on 
the basis of the charging information stored in the storage 
module 73 and the charging information calculated in step 
S334. When the current charge is judged to be greater than 
the upper limit of charge, in step S336, the receiver 51 
executes the processing for receiving the distribution key Kd, 
which has been described in relation to FIG. 48, to thereby 
obtain a new distribution key Kd. Subsequently, the receiver 
51 proceeds to step S337. When it is judged in step S335 
that the current charge is less than the upper limit of 
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charge, the receiver 51 skips steps 336 and proceeds to step 
S337. 

[0177] In step S337, the charging processing module 72 of 
the receiver 51 stores the charging information in the 
storage module 73. In step S338, the charging processing 
module 72 of the receiver 51 stores in the HDD 52 the 
conditions-f or-use information generated in step S334. In 
step S339, the SAM 62 of the receiver 51 registers in the HDD 
52 the handling policy extracted from the service-provider 
secure container . 

[0178] In step S340, the decryption/encryption module 74 of 
the receiver 51 applies the hash function to the conditions - 
f or-use information to thereby calculate a hash value. In 
step S341, the storage module 73 of the receiver 51 stores 
the hash value of the conditions-f or-use information. In the 
case in which the save key Ksave is not stored in the storage 
module 73, in step S342, the random-number generation unit 92 
of the receiver 51 generates a random number serving as a 
save key Ksave. Subsequently, the receiver 51 proceeds to 
step S343. In the case in which the save key Ksave is stored 
in the storage module 73, the receiver 51 skips step S342 and 
proceeds to step S343. 

[0179] In step S343, the encryption unit 93 of the receiver 
51 encrypts the content key Kco by use of the save key Ksave. 
In step S344, the SAM 62 of the receiver 51 stores the 
encrypted content key Kco in the HDD 52. In the case in 
which the save key Ksave is not stored in the storage module 
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73, step S345, the decryption/encryption module 74 of the 
receiver 51 stores the save key Ksave in the storage module 
73. Subsequently, the receiver 51 ends the processing. In 
the case in which the save key Ksave is stored in the storage 
module 73, the receiver 51 skips step S345 and ends the 
processing. 

[0180] In the above- described manner, the receiver 51 stores 
the charging information in the storage module 73, decrypts 
the content key Kco by use of the distribution key Kd, 
encrypts the content key Kco by use of the save key Ksave, 
and stores it in the HDD 52. The save key Ksave is stored in 
the storage module 73. 

[0181] Through processing similar to the above-described 
processing, the recorder 53 stores the charging information 
in the storage module provided within the SAM 66, decrypts 
the content key Kco by use of the distribution key Kd, 
encrypts the content key Kco by use of the save key Ksave, 
and stores it in the HDD 52. The save key Ksave is stored in 
the storage module within the SAM 66. 

[0182] With reference to the flowchart of FIG. 55, there 
will be described the processing which corresponds to step 
SI 7 of FIG. 34 and which enables the receiver 51 to reproduce 
content. In step S361, the decryption/encryption module 74 
of the receiver 51 reads out of the HDD 52 the conditions- 
for-use information stored in step S338 of FIG. 54 and the 
encrypted content key Kco stored in step S344 of FIG. 54. In 
step S362, the decryption/encryption module 74 of the 
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receiver 51 applies the hash function to the conditionJpf or- 
use information to calculate a hash value. 

[0183] In step S363, the decryption/encryption module 74 of 
the receiver 51 judges whether the hash value calculated in 
step S362 coincides with hash value which was stored in the 
storage module 73 in step S340 of FIG. 54. When the hash 
value calculated in step S362 is judged to coincide with hash 
value stored in the storage module 73, in step S364, the 
decryption/encryption module 74 of the receiver 51 updates 
predetermined information, such as a value indicating the 
number of times of use, contained in the conditions -for-use 
information. In step S365, the decryption/encryption module 
74 of the receiver 51 applies the hash function to the 
updated conditions -for-use information to thereby obtain a 
hash value. In step S366, the storage module 73 of the 
receiver 51 stores the hash value of the conditions -for-use 
information calculated in step S365. In step S367, the 
decryption/encryption module 74 of the receiver 51 records 
the updated conditions-f or-use information in the HDD 52. 
[0184] In step S368, the mutual authentication module 71 of 
the SAM 62 and the mutual authentication module 75 of the 
extension section 63 mutually authenticate, and the SAM 62 
and the extension section 63 store the temporary key Ktemp. 
Since this authentication processing is similar to that 
having been described with reference to FIGS. 37 to 39, 
repeated description is omitted here. The random number Rl , 
R2 , or R3 used in the mutual authentication is used as a 
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temporary key Ktemp. In step S369. by use of the save key 
Ksave stored in the storage module 73. the decryption unit 91 
of the decryption/encryption module 7 4 decrypts the content 
key Kco which was stored in the HDD 52 in step S344 of FIG. 
54. In step S370, the encryption unit 93 of the 
decryption/ encryption module 74 encrypts the decrypted 
content key Kco by use of the temporary key Ktemp. In step 
S371, the SAM 62 transmits to the extension section 63 the 
content key Kco having been encrypted by use of the temporary 
key Ktemp. 

[0185] In step S372, the decryption module 76 of the 
extension section 63 decrypts the content key Kco by use of 
the temporary key Ktemp. In step S373, the SAM 62 reads the 
content recorded in the HDD 52 and transmits it to the 
extension section 63. In step S374, the decryption module 77 
of the extension section 63 decrypts the content by use of 
the content key Kco. In step S375, the extension module 78 
of the extension section 63 extends the decrypted content in 
accordance with a predetermined scheme such as ATRAC 2 . In 
step S376, the watermark addition module 79 of the extension 
section 63 inserts into the extended content a predetermined 
watermark that specifies the receiver 51. In step S377, the 
receiver 51 outputs the reproduced content to an 
unillust rated speaker or the like and then ends the 
processing. 

[0186] When in step S363 the hash value calculated in step 
S3 6 2 is judged not to coincide with the hash value stored in 
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the storage module 73 , in step S378, the SAM. 62 performs 
predetermined error processing,, such as processing for 
causing an unillustrated display unit to display an error 
message, and then ends the processing. 

[0187] In the above-described manner, the receiver 51 
reproduces the content . 

[0188] FIG. 56 is a flowchart showing processing which the 
receiver 51 in the user home network 5 having the 
configuration shown in FIG. 11 performs in order to cause the 
decoder 56 to reproduce content. Since processing in steps 
S391 to S397 is the same as that in steps S361 to S367 of FIG. 
55, repeated description is omitted here. 

[0189] In step S398, the mutual authentication module 71 of 
the SAM 62 and the mutual authentication module 101 of the 
decoder 56 mutually authenticate and share the temporary key 
Ktemp. Since this authentication processing is similar to 
that having been described with reference to FIGS . 37 to 39, 
repeated description is omitted here. The random number Rl, 
R2, or R3 used in the mutual authentication is used as a 
temporary key Ktemp. In step S399, by use of the save key 
Ksave stored in the storage module 73, the decryption unit 91 
of the decryption/encryption module 74 decrypts the content 
key Kco which was stored in the HDD 52. In step S400, the 
encryption unit 93 of the decryption/encryption module 74 
encrypts the decrypted content key Kco by use of the 
temporary key Ktemp. In step S401, the SAM 62 transmits to 
the decoder 56 the content key Kco. having been encrypted by 
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use of the temporary key Ktemp. 

[0190] In step S402, the decryption module 102 of the 
decoder 56 decrypts the content key Kco by use of the 
temporary key Ktemp. In step S403, the SAM 62 reads the 
content recorded in the HDD 52 and transmits it to the 
decoder 56. In step S404. the decryption module 103 of the 
decoder 56 decrypts the content by use of the content key Kco. 
In step S405, the extension module 104 of the decoder 56 
extends the decrypted content in accordance with a 
predetermined scheme such as ATRAC 2 . In step S406. the 
watermark addition module 105 of the decoder 56 inserts into 
the extended content a predetermined watermark that specifies 
the decoder 56. In step S407, the decoder 56 outputs the 
reproduced content to an unillustrated speaker or the like 
and then ends the processing. 

[0191] Since processing in step S408 is the same as that in 
step S378 of FIG. 55, repeated description is omitted here. 
[0192] As described above, when the user home network 5 has 
the configuration shown in FIG. 11, the content received by 
the receiver 51 is reproduced at the decoder 56. 
[0193] With reference to the flowchart of FIG. 57, there is 
described processing which enables the EMD service center 1 
to produce a settlement object before performance of 
settlement processing, which will be described later with 
reference to FIG. 61. In step S421, the historical-data 
management section 15 of the EMD service center 1 selects 
charging information regarding use of specific content, among 
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a plurality pieces of charging information which the 
historical-data management section 15 has received from the 
user home network 5 and stores in, for example, step S187 or 
S189 of FIG. 47. Subsequently, the historical-data 
management section 15 transmits the selected charging 
information to the profit-distribution section 16. In step 
S422, the prof it -distribution section 16 judges whether the 
charging information received from the historical-data 
management section 15 contains data showing profit 
distribution to the content provider 2 and the service 
provider 3. When the charging information received from the 
historical-data management section 15 is judged to contain 
data showing profit distribution to the content provider 2 
and the service provider 3. the prof it -distribution section 
16 proceeds to step S423. 

[0194] in step S423, with reference to the data contained in 
the charging information and indicating profit distribution, 
the profit-distribution section 16 calculates an amount of 
money which a user having utilized the specific content must 
pay to the service provider 3. In step S424, with reference 
to the data contained in the charging information and 
indicting profit distribution, the profit-distribution 
section 16 calculates an amount of money which the service 
provider 3 must pay to the content provider 2. In step S425, 
with reference to the data contained in the charging 
information and indicting profit distribution, the profit - 
distribution section 16 calculates an amount of money which 
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the content provider 2 must pay to the proprietary 
organization. Subsequently the prof it -distribution section 
16 proceeds to step S429. 

[0195] When in step S422 the charging information received 
from the historical-data management section 15 is judged not 
to contain data showing profit distribution to the content 
provider 2 and the service provider 3, the profit - 
distribution section 16 proceeds to step S426- In step S426. 
with reference to the prof it -distribution database stored in 
the profit -distribution section 16, the profit-distribution 
section 16 calculates an amount of money which the user 
having utilized the specific content must pay to the service 
provider 3. In step S427, with reference to the profit- 
distribution database stored in the profit-distribution 
section 16, the prof it -distribution section 16 calculates an 
amount of money which the service provider 3 must pay to the 
content provider 2. In step S428, with reference to the 
prof it -distribution database stored in the profit- 
distribution section 16, the prof it -distribution section 16 
calculates an amount of money which the content provider 2 
must pay to the proprietary organization. Subsequently the 
prof it -distribution section 16 proceeds to step S429. 
[0196] In step S429, with reference to data of the discount 
information database stored in the profit-distribution 
section 16, the profit-distribution section 16 corrects the 
amount of money which the specific user must pay to the 
service provider 3 , the amount of money which the service 
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provider 3 must pay to the content provider 2, and the amount 
of money which the content provider 2 must pay to the 
proprietary organization. 

[0197] in step S430, the historical- data management section 
15 judges whether the calculations in steps S423 to S429 have 
been performed for all the contents. When it is judged that 
the calculations in steps S423 to S429 have not yet been 
performed for all the contents, the historical- data 
management section 15 returns to step S421 in order to repeat 
the processing in step 421 and in subsequent steps. When it 
is judged in step S430 that the calculations in steps S423 to 
S429 have been performed for all the contents, the profit- 
distribution section 16 proceeds to step S431. 
[0198] in step S431, for each user, the prof it -distribution 
section 16 calculates an amount of money to be paid to each 
service provider 3 and produces a credit settlement object 1 
(e.g.. a credit settlement object 1 shown in FIG. 58(A) when 
the user pays the usage fee by use of a credit card). In the 
credit settlement object 1, the ID of the user is set as a 
payer; the ID of the service provider 3 is set as a receiver; 
and an amount of money to be paid to the service provider 3 
is set as a payment amount. In step S432. for- each service 
provider 3, the prof it -distribution section 16 calculates an 
amount of money to be paid to each content provider 2 and 
produces a credit settlement object 2 (e.g.. a credit 
settlement object 2 shown in FIG. 58(B) when the user pays 
the usage fee by use of a credit card) . In the credit 
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settlement object 2, the credit settlement object 1 is set as 
a payer; the ID of the content provider 2 is set as a 
receiver; and an amount of money to be paid to the content 
provider 2 is set as a payment amount . 

[0199] In step S433, for each content provider 2, the 
profit-distribution section 16 calculates an amount of money 
to be paid to the proprietary organization and produces a 
credit settlement object 3 (e.g., a credit settlement object 
3 shown in FIG. 58(C) when the user pays the usage fee by use 
of a credit card). In the credit settlement object 3, the 
credit settlement object 1 is set as a payer; the ID of the 
proprietary organization is set as a receiver; and an amount 
of money to be paid to the proprietary organization is set as 
a payment amount. In step S434, with reference to the user's 
usage-fee table which is stored in the charge billing section 
19 and which stores a usage fee that each user pays to the 
EMD service center 1, the charge billing section 19 
calculates an amount of money to be collected from the user 
and produces a credit settlement object 4 (e.g., a credit 
settlement object 4 shown in FIG. 58(D) when the user pays 
the usage fee by use of a credit card). Further, the charge 
billing section 19 sets the collection money of the credit 
settlement object 1 and ends the processing. In the credit 
settlement object 4, the credit settlement object 1 is set as 
a payer; the ID of the EMD service center 1 is set as a 
receiver; and an amount of money to be paid to the EMD 
service center 1 is set as a payment amount. 
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[0200] In the above-described manner, the EMD service center 
1 produces a settlement object. 

[0201] FIG. 59 is a diagram showing an example of a bank 
settlement object used when the service provider 3, the 
content provider 2, and the proprietary organization pay 
service charges to the EMD service center 1 by means of bank 
settlement. In a bank settlement object 1 shown in FIG. 
59(A), the ID of the service provider 3 is set as a payer; an 
amount of money to be collected from the service provider 3 
is set as a collection amount; the ID of the EMD service 
center 1 is set as a receiver; and an amount of money to be 
paid to the EMD service center 1 (equal to the collection 
amount) is set as a payment amount. In a bank settlement 
object 2 shown in FIG. 59(B), the ID of the content provider 
2 is set as a payer; an amount of money to be collected from 
the content provider 2 is set as a collection amount; the ID 
of the EMD service center 1 is set as a receiver; and an 
amount of money to be paid to the EMD service center 1 (equal 
to the collection amount) is set as a payment amount. In a 
bank settlement object 3 shown in FIG. 59(C). the ID of the 
proprietary organization is set as a payer; an amount of 
money to be collected from the proprietary organization is 
set as a collection amount; the ID of the EMD service center 
1 is set as a receiver; and an amount of money to be paid to 
the EMD service center 1 (equal to the collection amount) is 
set as a payment amount. 

[0202], FIG. 60 is a diagram showing an example of a 
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settlement object used when each user pays fees by use of a 
credit card; and the service provider 3 and the content 
provider 2 perform settlement by use of their bank accounts. 
Since the credits settlement objects of FIGS. 60(A) and 60(D) 
are the same as those of FIGS. 58(A) and 58(D), repeated 
descriptions are omitted. In a bank settlement object 2 
shown in FIG. 60(B), the ID of the service provider 3 is set 
as a payer; an amount of money to be collected from the 
service provider 3 (the sum of an amount of money to be paid 
to the content provider 2 and an amount of money to be paid 
to the proprietary organization) is set as a collection 
amount; the ID of the content provider 2 is set as a 
receiver; and an amount of money to be paid to the content 
provider 2 (equal to the collection amount) is set as a 
payment amount. In a bank settlement object 3 shown in FIG. 
60(C), the ID of the content provider 2 is set as a payer; an 
amount of money to be collected from the content provider 2 
is set as a collection amount; the ID of the proprietary 
organization is set as a receiver; and an amount of money to 
be paid to the proprietary organization (equal to the 
collection amount) is set as a payment amount. 
[0203] Upon execution of settlement on the basis of the 
payers, collection amounts, receivers, and payment amounts 
described in the settlement objects of FIGS. 58, 59, and 60, 
predetermined amounts of money are paid to the EMD service 
center 1, the content provider 2, the service provider 3, and 
the proprietary organization. Processing which enables the 
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EMD service center 1 to perform settlement while using a 
credit settlement object will be described with reference to 
the flowchart of FIG. 61. In step S451, the treasury section 
20 of the EMD service center 1 obtains a settlement institute, 
such as a bank, which serves as a receiver, from an ID which 
is described as a receiver in the credit settlement object. 
In step S452, the treasury section 20 of the EMD service 
center 1 obtains a settlement institute, such as a credit 
company, which serves as a payer, from an ID which is 
described as a payer in the credit settlement object. In 
step S453, on the basis of previously stored information, the 
treasury section 20 judges whether credit-check processing 
must be performed for the payer. When it is judged that 
credit-check processing for the payer is necessary, in step 
S454, the treasury section 20 performs the credit-check 
processing. When the credit-check processing performed in 
step S454 has revealed that the payer cannot make payment, 
the treasury section 20 ends the processing. When the 
credit-check processing performed in step S454 has revealed 
that the payer can make payment, the treasury section 20 
proceeds to step S455. 

[0204] When it is judged in step S453 that credit-check 
processing for the payer is unnecessary, the treasury section 
20 skips step S454 and proceeds to step S455. 

[0205] In step S455, the treasury section 20 judges whether 
the processing for the previous settlement object has been 
completed. When it is judged that the processing for the 
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previous settlement object has been completed, the treasury 
section 20 proceeds to step S456 and transmits to the 
settlement institutes obtained in steps S451 and S452 
respective settlement instructions which correspond to the 
collection amount and payment amount described in the credit 
settlement object. In step S457. the treasury section 20 
transmits the information regarding the settlement processing 
performed in step S456 to a receiver corresponding to the ID 
which is described as a receiver in the credit settlement 
object. In step S458, the treasury section 20 transmits the 
information regarding the settlement processing performed in 
step S456 to a payer corresponding to the ID which is 
described as a payer in the credit settlement object. 
Subsequently, the treasury section 20 ends the processing... 
[0206] When it is judged in step S455 that the processing _ 
for the previous settlement object has not been completed, „. 
the treasury section 20 proceeds to step S459 and executes 
predetermined error processing for incomplete settlement; 
such as processing for transmitting a predetermined message 
to a payer which is described in the settlement object, 
processing for which has not been completed. 
[0207] In the above-described manner, settlement using 
credit settlement objects is performed. 

[0208] FIG. 62 is a flowchart showing processing which 
enables the EMD service center 1 to perform settlement while 
using bank settlement objects. This processing is equivalent 
to processing which is obtained by removing processing for 
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credit check (steps S451 and S454) from the settlement 
processing using credit settlement objects shown in FIG. 61. 
Since processing in steps S471 and S472 is the same as that 
in steps S451 and S452 of FIG. 61, repeated description is 
omitted here. Since processing in steps S473 to S477 is the 
same as that in steps S455 to S459 of FIG. 61, repeated 
description is omitted here. 

[0209] In the above-described manner, settlement using bank 
settlement objects is processed together with settlement 
using credit settlement objects. Thus, predetermined amounts 
of money are collected from users, the content provider 2, 
the service provider 3, and the proprietary organization; and 
predetermined amounts of money are transferred to the EMD 
service center 1, the content provider 2, the service 
provider 3, and the proprietary organization. 
[0210] The embodiment has been described while music data 
were used as example content. However, contents are not 
limited to music data and may be dynamic image data, static 
image data, document data, or program data. When these data 
are distributed, a compression scheme suitable for the type 
of content (e.g., MPEG (Moving Picture Experts Group) for 
image data) is used. As to watermarks, a watermark suitable 
for the type of content is used. 

[0211] The common key cryptosystem has been described while 
DES, which is a block cryptosystem, was used as an example. 
However, FEAL proposed by NTT. (Trademark), IDEA 
(International Data Encryption Algorithm), or stream. 
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cryptosystem in which encryption is performed for each unit 
consisting of one bit to a few bits may be used. 

[0212] In the embodiment, content and a content key Kco are 
encrypted in common key cryptosystem. However, a public key 
cryptosystem may be used. 

[0213] In the present specification, the term "system" 
refers to the entire apparatus consisting of a plurality of 
apparatuses. 

[0214] Examples of a provision medium for providing users 
with a computer program for performing the above -described 
processing include recording media such as a magnetic disk, a 
CD-ROM, and solid memories, as well as communication media 
such as a network and a satellite. 
[0215] 

[Effect of the Invention] In the information processing 
apparatus described in claim 1, the information processing, 
method described in claim 6, and the provision medium 
described in claim 7, data which specify the information, and 
data which indicate an amount to be paid to each of the 
information providers for use of the information are stored; 
the sum total of amounts to be paid to each of the 
information providers is calculated on the basis of the 
stored data; and an instruction is issued to a settlement 
institute to perform settlement for each of the information 
providers, on the basis of profits gained by each of the 
information providers. Therefore, settlement processing and 
prof it -calculation processing can be performed more 
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efficiently. 

[Brief Description of the Drawings] 

[FIG. 1] Diagram for explaining an EMD system. 

[FIG. 2] Block diagram showing the functional configuration 

of the EMD service center 1 . 

[FIG. 3] Diagram for explaining transmission of distribution 
keys Kd by the EMD service center 1 . 

[FIG. 4] Diagram for explaining transmission of distribution 
keys Kd by the EMD service center 1 . 

[FIG. 5] Diagram for explaining transmission of distribution 
keys Kd by the EMD service center 1 . 

[FIG. 6] Diagram for explaining transmission of distribution 
keys Kd by the EMD service center 1. 

[FIG. 7] Diagram for explaining the user-registration data 
base. 

[FIG. 8] Block diagram showing the functional configuration 
of the content provider 2. 

[FIG. 9] Block diagram showing the functional configuration 
of the service provider 3. 

[FIG. 10] Block diagram showing the configuration of the 
user home network 5 . 

[FIG. 11] Block diagram showing the configuration of the 
user home network 5. 

[FIG. 12] Diagram for describing a content and information 
accompanying the content . 

[FIG. 13] Diagram for explaining a content -provider secure 
container. 
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[FIG. 14] Diagram for explaining a certificate of the 
content provider 2 . 

[FIG. 15] Diagram for explaining a service -provider secure 
container. 

[FIG. 16] Diagram for explaining a certificate of the 
service provider 3 . 

[FIG. 17] Diagram showing a handling policy, price 

information, and conditions-f or-use information. 

[FIG. 18] Diagram for explaining single copying and multiple 

copying. 

[FIG. 19] Diagram for explaining a handling policy and price 
information. 

[FIG. 20] Diagram for explaining a handling policy, price 

information, and conditions-f or-use information. 

[FIG. 21] Diagram for explaining another configuration of a 

content and information accompanying the content. 

[FIG. 22] Diagram for explaining a service-provider secure 

container. 

[FIG. 23] Diagram showing a configuration of a handling 
policy, handling control information, price information, and 
conditions-f or-use information . 

[FIG. 24] Diagram for explaining another configuration of a 

content and information accompanying the content. 

[FIG. 25] Diagram for explaining a content -provider secure 

container. 

[FIG. 26] Diagram for explaining a service -provider secure 
container. 
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[FIG. 27] Diagram for explaining the operation of the EMD 
service center 1 for collecting data necessary for settlement 
processing. 

[FIG. 28] Diagram showing an example of the profit - 
distribution data base. 

[FIG. 29] Diagram showing an example of the discount table. 
[FIG. 30] Diagram showing an example of the user's usage-fee 
table. 

[FIG. 31] Diagram for explaining the operation of the EMD 
service center 1 when receiving charging information from the 
user home network 5 . 

[FIG. 32] Diagram for explaining the operation of the EMD 
service center 1 for profit distribution processing. 
[FIG. 33] Diagram for explaining the operation of the EMD 
service center 1 for transmitting to the JASRAC information 
regarding past use of contents. 

[FIG. 34] Flowchart for explaining processing for content 
distribution. 

[FIG. 35] Flowchart for explaining processing for content 
distribution. 

[FIG. 36] Flowchart for explaining processing which enables 
the EMD service center 1 to transmits distribution keys Kd to 
the content provider 2 . 

[FIG. 37] Flowchart for explaining the operation of mutual 
authentication performed between the content provider 2 and 
the EMD service center 1. 

[FIG. 38] Flowchart for explaining the operation of mutual 
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authentication performed between the content provider 2 and 
the EMD service center 1. 

[FIG. 39] Flowchart for explaining the operation of mutual 
authentication performed between the content provider 2 and 
the EMD service center 1. 

[FIG. 40] Flowchart for explaining processing which enables 
registration of the receiver 51 in the EMD service center 1. 
[FIG. 41] Diagram for explaining a certificate of the SAM. 
[FIG. 42] Diagram for explaining a registration list. 
[FIG. 43] Flowchart for explaining processing for 
transferring data of the SAM 62 to the IC card 55 for backup. 
[FIG. 44] Flowchart for explaining processing for 
transferring data of the SAM 62 to the IC card 55 for backup. 
[FIG. 45] Flowchart for explaining processing for causing a 
new receiver to read backup data from the IC card 55. 
[FIG. 46] Flowchart for explaining processing for causing, a 
new receiver to read backup data from the IC card 55. 
[FIG. 47] Flowchart for explaining processing which enables 
the receiver 51 to register the recorder 53 depending thereon 
in the EMD service center 1. 

[FIG. 48] Flowchart for explaining processing which enables 
the receiver 51 to receive the distribution key Kd from the 
EMD service center 1 . 

[FIG. 49] Flowchart for explaining processing which enables 
the recorder to receive the distribution key Kd. 
[FIG. 50] Flowchart for explaining processing which enables 
the content provider 2 to transmit a content -provider secure 
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container to the service provider 3. 

[FIG. 51] Flowchart for explaining another processing which 
enables the content provider 2 to transmit a content -provider 
secure container to the service provider 3. 

[FIG. 52] Flowchart for explaining processing which enables 
the service provider 3 to transmit a service -provider secure 
container to the receiver 51, 

[FIG. 53] Flowchart for explaining processing which enables 
the service provider 3 to transmit a service -provider secure 
container to the receiver 51. 

[FIG. 54] Flowchart for explaining charging processing of 
the receiver 51. 

[FIG. 55] Flowchart for explaining processing which enables 
the receiver 51 to reproduce content. 

[FIG. 56] Flowchart for explaining processing which enables 
the receiver 51 to cause the decoder 56 to reproduce the 
content. 

[FIG. 57] Flowchart for explaining settlement -object- 
production processing of the EMD service center 1. 
[FIG. 58] Diagram showing an example of a credit settlement 
object . 

[FIG. 59] Diagram showing an example of a bank settlement 
object. 

[FIG. 60] Diagram showing an example of the credit 
settlement object and the bank settlement object.. 
[FIG. 61] Flowchart for explaining credit settlement 
processing. 
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[FIG. 62] Flowchart for explaining bank settlement 
processing. 

[Description of Reference Numerals] 

1: EMD service center, 2: content provider, 3: service 
provider, 5: user home network, 15: historical-data 
management section, 16: profit-distribution section, 18: user 
management section, 20: treasury section, 42: pricing section, 
51: receiver, 56: decoder, 61: communication section, 62: SAM , 
63: extension section, 71: mutual authentication module, 72: 
charge module, 73: storage module, 74: decryption/encryption 
module, 75: mutual authentication module, 76: decryption 
module, 77: decryption module, 81: mutual authentication 
module, 91: decryption unit, 92: encryption unit, 93: 
encryption unit, 101: mutual authentication module, 102: 
decryption module, 103: decryption module 
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FIG. 1 

1: EMD SERVICE CENTER 
2: CONTENT PROVIDER 
3: SERVICE PROVIDER 
4: NETWORK 

5: USER HOME NETWORK 
FIG. 2 

11: SERVICE -PROVIDER MANAGEMENT SECTION 
12: CONTENT -PROVIDER MANAGEMENT SECTION 
13: COPY-RIGHT MANAGEMENT SECTION 
14: KEY SERVER 

15: HISTORICAL -DATA MANAGEMENT SECTION 

16: PROFIT-DISTRIBUTION SECTION 

17: MUTUAL AUTHENTICATION SECTION 

18: USER MANAGEMENT SECTION 

19: CHARGE BILLING SECTION 

20: TREASURY SECTION 

21: AUDITOR SECTION 

A: EMD SERVICE CENTER 1 

FIG. 3 

A: DISTRIBUTION KEY HELD BY CONTENT PROVIDER 
B: DISTRIBUTION KEY HELD BY EMD SERVICE CENTER 
C: DISTRIBUTION KEY HELD BY RECEIVER 
D: DISTRIBUTION KEYS TO BE USED 
E: DISTRIBUTION KEY 
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F: VERSION OF DISTRIBUTION KEY 
G: USABLE PERIOD 
H : START 
I: END 

J: TRANSMISSION OF DISTRIBUTION KEYS 
FIG. 4 

SAME AS FIG. 3 
FIG. 5 

SAME AS FIG. 3 
FIG. 6 

SAME AS FIG. 3 

FIG. 7 

A: ID 

B: SETTLEMENT PROCESSING 

C: REGISTRATION 

D: CONNECTION WITH EMD SERVICE CENTER 

E: POSSIBLE 

F: IMPOSSIBLE 

FIG. 8 

31: CONTENT SERVER 

32: WATERMARK ADDING SECTION 

33: COMPRESSION SECTION 
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34: ENCRYPTION SECTION 

35: RANDOM - NUMBER GENERATION SECTION 

36: ENCRYPTION SECTION 

37: POLICY STORAGE SECTION 

38: SECURE CONTAINER CREATION SECTION 

39: MUTUAL AUTHENTICATION SECTION 

A: CONTENT PROVIDER 2 

FIG 9 

41: CONTENT SERVER 

42: PRICING SECTION 

43: POLICY STORAGE SECTION 

44: SECURE CONTAINER CREATION SECTION 

45: MUTUAL AUTHENTICATION SECTION 

A: SERVICE PROVIDER 3 

FIG. 10 

51 : RECEIVER 

52: HDD 

53: RECORDER 

54: MD DRIVE 

55: IC CARD 

61: COMMUNICATION SECTION 
62: SAM 

63: EXTENSION SECTION 
64: IC CARD INTERFACE 
65: RECORD/REPRODUCTION SECTION 
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66 : SAM 

67: EXTENSION SECTION 

71: MUTUAL AUTHENTICATION MODULE 

72: CHARGE MODULE 

73: STORAGE MODULE 

74: DECRYPTION/ENCRYPTION MODULE 

75: MUTUAL AUTHENTICATION MODULE 

76: DECRYPTION MODULE 

77: DECRYPTION MODULE 

78: EXTENSION MODULE 

79: WATERMARK ADDITION MODULE 

80: MUTUAL AUTHENTICATION MODULE 

81: STORAGE MODULE 

91: DECRYPTION UNIT 

92: RANDOM-NUMBER GENERATION UNIT 

93: ENCRYPTION UNIT 

A: USER HOME NETWORK 5 

FIG- 11 

56: DECODER 

101: MUTUAL AUTHENTICATION MODULE 

102: DECRYPTION MODULE 

103: DECRYPTION MODULE 

104: EXTENSION MODULE 

105: WATERMARK ADDITION MODULE 

A: USER HOME NETWORK 5 

OTHER ELEMENTS ARE THE SAME AS THOSE SHOWN IN FIG. 10 
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FIG. 12 

1: EMD SERVICE CENTER 

2: CONTENT PROVIDER 

3: SERVICE PROVIDER 

5: USER HOME NETWORK 

A : CONTENT 

B: CONTENT KEY 

C: HANDLING POLICY 

D: PRICE INFORMATION 

E: CONDITIONS -FOR -USE INFORMATION 

F: CHARGING INFORMATION 

G: ENCRYPTED INFORMATION 

H: INFORMATION WITH SIGNATURE 

FIG. 13 

A: CONTENT -PROVIDER SECURE CONTAINER 

B: CONTENT KEY Kco 

C : CONTENT ^ 

D: DISTRIBUTION KEY Kd 

E: HANDLING POLICY 

F: PRIVATE KEY Kscp OF CONTENT PROVIDER 

G: SIGNATURE 

H: HASH FUNCTION 

FIG. 14 

A: CERTIFICATE OF CONTENT PROVIDER 
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B: VERSION NUMBER OF CERTIFICATE 

C: SERIAL NUMBER OF CERTIFICATE WHICH AUTHENTICATION 
OFFICE HAS ALLOCATED 

D: ALGORITHM AND PARAMETERS USED IN SIGNATURE 

E: NAME OF AUTHENTICATION OFFICE 

F: VALID TERM OF CERTIFICATE 

G: NAME (ID) OF CONTENT PROVIDER 

H: PUBLIC KEY Kpcp OF CONTENT PROVIDER 

I: PRIVATE KEY Ksca OF AUTHENTICATION OFFICE 

J: SIGNATURE 

K: HASH FUNCTION 

FIG 15 

A: SERVICE PROVIDER SECURE CONTAINER 
B: CONTENT KEY Kco 
C : CONTENT 

D: DISTRIBUTION KEY Kd 
E: HANDLING POLICY 
F: PRICE INFORMATION 

G: PRIVATE KEY Kssp OF SERVICE PROVIDER 

H: SIGNATURE 

I: HASH FUNCTION 

FIG. 16 

A: CERTIFICATE OF SERVICE PROVIDER 
B: VERSION NUMBER OF CERTIFICATE 

C: SERIAL NUMBER OF CERTIFICATE WHICH AUTHENTICATION 
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OFFICE HAS ALLOCATED 

D: ALGORITHM AND PARAMETERS USED IN SIGNATURE 

E: NAME OF AUTHENTICATION OFFICE 

F: VALID TERM OF CERTIFICATE 

G: NAME (ID) OF SERVICE PROVIDER 

H: PUBLIC KEY Kpsp OF SERVICE PROVIDER 

I: PRIVATE KEY Ksca OF AUTHENTICATION OFFICE 

J: SIGNATURE 

K: HASH FUNCTION 

FIG. 17 

A: HANDLING POLICY 

B: ITEMS OF USE 

C : REPRODUCTION 

D: SINGLE COPYING 

E: MULTICOPYING 

F : POSSIBLE/IMPOSSIBLE 

G: HANDLING POLICY AND PRICE INFORMATION 
H: PRICE 
I: 150 YEN 
J: 80 YEN 

K: CONDITIONS -FOR-USE INFORMATION 
FIG. 18 

A: MULTICOPYING 
B: SINGLE COPYING 
C: ORIGINAL 
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D: COPY 
FIG. 19 

A: ITEMS OF USE 
B: REPRODUCTION 
C: SINGLE COPY 
D: MULTIPLE COPY 

E: HANDLING POLICY AND PROFIT DISTRIBUTION 
F: POSSIBLE/ IMPOSSIBLE 
G: PROFIT DISTRIBUTION 

H: HANDLING POLICY, PROFIT DISTRIBUTION. AND 

INFORMATION 

I : DISTRIBUTION PRICE 

J: CHARGING INFORMATION 

K: NUMBER OF TIMES OF USE 

L: 70 YEN 

M: 40 YEN 

N: 60 YEN 

O: 150 YEN 

P: 30 YEN 

Q: 80 YEN 

FIG. 20 

A: HANDLING POLICY AND PRICE INFORMATION 
B: ITEMS OF USE 
C: REPRODUCTION 
D: LIMITLESS 
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E: LIMITED NUMBER OF TIMES 

F: LIMITED PERIOD 

G: PRICE 

H: 60 YEN 

I: 90 YEN 

J: CONDITIONS-FOR-USE INFORMATION 
FIG. 21 

1: EMD SERVICE CENTER 

2: CONTENT PROVIDER 

3: SERVICE PROVIDER 

5: USER HOME NETWORK 

A : CONTENT 

B: CONTENT KEY 

C: HANDLING POLICY 

D: PRICE INFORMATION 

E: CONDITIONS-FOR-USE INFORMATION 

F: CHARGING INFORMATION 

H: ENCRYPTED INFORMATION 

I: INFORMATION WITH SIGNATURE 

G: HANDLING CONTROL INFORMATION 

FIG. 22 

A: CONTENT -PROVIDER SECURE CONTAINER 
B: CONTENT KEY Kco 
C : CONTENT 

D: DISTRIBUTION KEY Kd 
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E: HANDLING POLICY 

F: HANDLING CONTROL INFORMATION 
G: PRICE INFORMATION 

H: PRIVATE KEY Kssp OF SERVICE PROVIDER 

I : SIGNATURE 

J: HASH FUNCTION 

FIG. 23 

A: ITEMS OF USE 

B : REPRODUCTION 

C: SINGLE COPYING 

D: MULTICOPYING 

E: POSSIBLE/IMPOSSIBLE 

F: PRICE 

G: CONDITIONS -FOR-USE INFORMATION 

H: 150 YEN 

I: 80 YEN 

J: HANDLING POLICY 

K: HANDLING CONTROL INFORMATION AND PRICE INFORMATION 
FIG. 24 

1: EMD SERVICE CENTER 
2: CONTENT PROVIDER 
3: SERVICE PROVIDER 
5: USER HOME NETWORK 
A : CONTENT 
B: CONTENT KEY 
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C: HANDLING POLICY 

D: PRICE INFORMATION 

E: CONDITIONS -FOR -USE INFORMATION 

F: CHARGING INFORMATION 

G: HANDLING CONTROL INFORMATION 

H: ENCRYPTED INFORMATION 

FIG. 25 

A: CONTENT -PROVIDER SECURE CONTAINER 

B: CONTENT KEY Kco 

C : CONTENT 

D: DISTRIBUTION KEY Kd 

E: HANDLING POLICY 

F: PRIVATE KEY Kscp OF CONTENT PROVIDER 

G: SIGNATURE 

H: HASH FUNCTION 

FIG. 26 

A: SERVICE -PROVIDER SECURE CONTAINER 
B: CONTENT KEY Kco 
C : CONTENT 

D: DISTRIBUTION KEY Kd 

E: HANDLING POLICY 

F: HANDLING CONTROL INFORMATION 

G: PRICE INFORMATION 

H: PRIVATE KEY Kssp OF SERVICE PROVIDER 
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I: SIGNATURE 

J: HASH FUNCTION 

FIG . 27 

1: EMD SERVICE CENTER 
2: CONTENT PROVIDER 
3: SERVICE PROVIDER 
5: USER HOME NETWORK 

A: CONTENT-PROVIDER REGISTRATION- DATA 
B:: CONTENT -PROVIDER ID 

C: SERVICE-PROVIDER REGISTRATION DATA 
D: SERVICE-PROVIDER ID 
E: USER ID 

F: USER-REGISTRATION DATA 

FIG. 28 

A: CONTENT ID 

B: CONTENT -PROVIDER ID 

C: PROPRIETOR ORGANIZATION 

FIG. 29 

A: PROVIDER ID 

B: CONTENT PROVIDER 1 

C: CONTENT PROVIDER 2 

D: SERVICE PROVIDER 1 

E: SERVICE PROVIDER 2 

F: CONTENT ID 
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G: DISCOUNT RATE 

H: PERIOD 

I: ALL CONTENTS 

FIG. 30 

A: MONTHLY BASIC CHARGE 

B: 1000 YEN 

C : PERIOD 

D: USAGE FEE 

E: ADJUSTMENT AMOUNT 

F: ABOVE 3000 YEN 

FIG- 31 

1: EMD SERVICE CENTER 
2: CONTENT PROVIDER 
3: SERVICE PROVIDER 
5 : USER HOME NETWORK 

11: SERVICE -PROVIDER MANAGEMENT SECTION 
12: CONTENT -PROVIDER MANAGEMENT. SECTION 
13: COPY-RIGHT MANAGEMENT SECTION 
14: KEY SERVER 

15: HISTORICAL -DATA MANAGEMENT SECTION 
16: PROFIT-DISTRIBUTION SECTION 
17: MUTUAL AUTHENTICATION SECTION 
18: USER MANAGEMENT SECTION 
19: CHARGE BILLING SECTION 
20: TREASURY SECTION 
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21: AUDITOR SECTION 
FIG. 32 

SAME AS FIG. 31 
FIG. 33 

SAME AS FIG. 31 
FIG. 34 

A: START CONTENT DISTRIBUTION PROCESSING 

Sll: EMD SERVICE CENTER TRANSMITS DISTRIBUTION KEYS TO 
CONTENT PROVIDER, AND CONTENT PROVIDER RECEIVES DISTRIBUTION 
KEYS 

S12: USER REGISTERS APPARATUS INFORMATION IN EMD SERVICE 
CENTER 

S13: EMD SERVICE CENTER TRANSMITS DISTRIBUTION KEYS TO USER, 
AND USER RECEIVES DISTRIBUTION KEYS 

S14: CONTENT PROVIDER TRANSMITS SECURE CONTAINER TO SERVICE 

PROVIDER, AND SERVICE PROVIDER RECEIVES SECURE CONTAINER 

SI 5: SERVICE PROVIDER TRANSMITS SECURE CONTAINER TO USER, AND 

USER RECEIVES SECURE CONTAINER 

S16: USER PERFORMS CHARGING PROCESSING 

S17: USER REPRODUCES CONTENT 

B: END 

FIG. 35 

A: START CONTENT DISTRIBUTION PROCESSING 
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S21: EMD SERVICE CENTER TRANSMITS DISTRIBUTION KEYS TO 
CONTENT PROVIDER, AND CONTENT PROVIDER RECEIVES DISTRIBUTION 
KEYS 

S22: EMD SERVICE CENTER TRANSMITS DISTRIBUTION KEYS TO 
SERVICE PROVIDER, AND SERVICE PROVIDER RECEIVES DISTRIBUTION 
KEYS 

S23: USER REGISTERS APPARATUS INFORMATION IN EMD SERVICE 
CENTER 

S24: EMD SERVICE CENTER TRANSMITS DISTRIBUTION KEYS TO USER, 
AND USER RECEIVES DISTRIBUTION KEYS 

S25: CONTENT PROVIDER TRANSMITS SECURE CONTAINER TO SERVICE 

PROVIDER, AND SERVICE PROVIDER RECEIVES SECURE CONTAINER 

S26: SERVICE PROVIDER TRANSMITS SECURE CONTAINER TO USER, AND 

USER RECEIVES SECURE CONTAINER 

S27: USER PERFORMS CHARGING PROCESSING 

S28: USER REPRODUCES CONTENT 

B: END 

FIG. 36 

A: START PROCESSING FOR TRANSMITTING DISTRIBUTION KEYS TO 
CONTENT PROVIDER 

S31: MUTUAL AUTHENTICATION WITH CONTENT PROVIDER 
S32: CONTENT PROVIDER RECEIVES DISTRIBUTION KEYS 
S33: CONTENT PROVIDER STORES DISTRIBUTION KEYS 
B : RETURN 

FIG. 37 
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1 : EMD SERVICE CENTER 
2: CONTENT PROVIDER 

S41: GENERATE RANDOM NUMBER Rl OF 64 BITS 
S42: ENCRYPT Rl BY USE OF KEY Kc 

S43: TRANSMIT ENCRYPTED Rl TO EMD SERVICE CENTER 
S44: DECRYPT RECEIVED Rl 

S45: GENERATE RANDOM NUMBER R2 OF 32 BITS 

S46: REPLACE LOWER 32 BITS OF RANDOM NUMBER Rl WITH RANDOM 
NUMBER R2 TO THEREBY OBTAIN R1 H | | R2 
S47: ENCRYPT R1 H | |R2 BY USE OF KEY Kc 

S48: TRANSMIT ENCRYPTED Rl„ | | R2 TO CONTENT PROVIDER 
S49: DECRYPT RECEIVED R1 H | | R2 

S5Q: AUTHENTICATE EMD SERVICE CENTER WHEN UPPER 32 BITS 

OF DECRYPTED Rl„ | | R2 COINCIDE 

S51: GENERATE RANDOM NUMBER R3 OF 32 BITS 

S52: FORM R2 | | R3 

S53: ENCRYPT R2 | | R3 BY USE OF KEY Kc 

S54: TRANSMIT ENCRYPTED R2 | | R3 TO EMD SERVICE CENTER 
S55: DECRYPT RECEIVED R2 | | R3 

S56: AUTHENTICATE CONTENT PROVIDER WHEN UPPER 32 BITS 
OF R2 | | R3 COINCIDE 

FIG. 38 

1: EMD SERVICE CENTER 
2 : CONTENT PROVIDER 

S61: GENERATE RANDOM NUMBER Rl OF 64 BITS 
S62: ENCRYPT Rl BY USE OF KEY Kcl 
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S63: TRANSMIT ENCRYPTED Rl TO EMD SERVICE CENTER 

S64: DECRYPT RECEIVED Rl 

S65: ENCRYPT Rl BY USE OF KEY Kc2 

S66: GENERATE RANDOM NUMBER R2 OF 64 BITS 

S67: ENCRYPT R2 BY USE OF KEY Kc2 

S68: TRANSMIT ENCRYPTED Rl AND R2 TO CONTENT PROVIDER 
S69: DECRYPT RECEIVED Rl AND R2 

S70: AUTHENTICATE EMD SERVICE CENTER WHEN DECRYPTED Rl 
COINCIDE 

S71: ENCRYPT R2 BY USE OF KEY Kcl 

S72: TRANSMIT ENCRYPTED R2 TO EMD SERVICE CENTER 
S73: DECRYPT RECEIVED R2 

S74: AUTHENTICATE CONTENT PROVIDER WHEN DECRYPTED R2 COINCIDE 
FIG. 39 

1: EMD SERVICE CENTER 
2: CONTENT PROVIDER 

S81: GENERATE RANDOM NUMBER Rl OF 64 BITS 

S82: TRANSMIT Rl AND CERTIFICATE TO EMD SERVICE CENTER 

S83: CHECK SIGNATURE OF CERTIFICATE AND WHEN PROPER, EXTRACT 

PUBLIC KEY Kpcp FROM CERTIFICATE 

S84: GENERATE RANDOM NUMBER R2 OF 64 BITS 

S85: FORM Rl | | R2 

S86: ENCRYPT Rl | | R2 BY USE OF PRIVATE KEY Ksesc 
S87: ENCRYPT Rl | | R2 BY USE OF PUBLIC KEY Kpcp 

S88: TRANSMIT TO CONTENT PROVIDER Rl | | R2 ENCRYPTED BY USE OF 
PRIVATE KEY Ksesc, Rl | | R2 ENCRYPTED BY USE OF PUBLIC KEY Kpcp, 
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AND CERTIFICATE 

S89: CHECK SIGNATURE OF CERTIFICATE AND WHEN PROPER, EXTRACT 

PUBLIC KEY Kpesc FROM CERTIFICATE 

S90: DECRYPT Rl | | R2 BY USE OF PUBLIC KEY Kpesc 

S91: DECRYPT Rl | | R2 BY USE OF PRIVATE KEY Kscp 

S92: AUTHENTICATE EMD SERVICE CENTER WHEN DECRYPTED Rl | | R2 

COINCIDE 

S93: GENERATE RANDOM NUMBER R3 OF 64 BITS 
S94: FORM R2 | | R3 

S95: ENCRYPT R2 | | R3 BY USE OF PUBLIC KEY Kpesc 

S96: TRANSMIT ENCRYPTED R2 | | R3 TO EMD SERVICE CENTER 

S97: DECRYPT R2 | | R3 BY USE OF PRIVATE KEY Ksesc 

S98: AUTHENTICATE CONTENT PROVIDER WHEN DECRYPTED R2 COINCIDE 



FIG. 40 

A: START REGISTRATION PROCESSING 
S101: IS IC CARD FOR BACKUP ATTACHED? 
S102: PROCESSING FOR READING BACKUP 

S103: SAM MUTUALLY AUTHENTICATES WITH EMD SERVICE CENTER AND 
TRANSMITS CERTIFICATE 

S104: SAM ENCRYPTS INFORMATION OF SETTLEMENT INSTITUTE OF 
USER, ETC. BY USE OF TEMPORARY KEY AND TRANSMITS THEM TO EMD 
SERVICE CENTER 

S105: EMD SERVICE CENTER SEARCHES REGISTRATION DATA BASE BY 
USE OF ID OF SAM 

S106: IS SAM OF RECEIVED ID REGISTERABLE? 
S107: IS SAM OF RECEIVED ID NEW REGISTRATION? 
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S108: EMD SERVICE CENTER PRODUCES REGISTRATION LIST OF UPDATE 
REGISTRATION 

S109: EMD SERVICE CENTER TRANSFERS TO SAM DISTRIBUTION KEY 
ENCRYPTED BY USE OF TEMPORARY KEY 

S110: SAME DECRYPTS AND STORES RECEIVED DISTRIBUTION KEY 
Sill: EMD SERVICE CENTER TRANSMITS TO SAM REGISTRATION LIST 
ENCRYPTED BY USE OF TEMPORARY KEY 

S112: SAM DECRYPTS AND STORES RECEIVED REGISTRATION LIST 
S113: EMD SERVICE CENTER PRODUCES REGISTRATION LIST OF 
REGISTRATION DENIAL 

S114: EMD SERVICE CENTER PRODUCES NEW REGISTRATION LIST 
B : RETURN 

FIG. 41 

A: CERTIFICATE OF SAM 

B: VERSION NUMBER OF CERTIFICATE 

C: SERIAL NUMBER OF CERTIFICATE WHICH AUTHENTICATION 
OFFICE HAS ALLOCATED 

D: ALGORITHM AND PARAMETERS USED IN SIGNATURE 

E: NAME OF AUTHENTICATION OFFICE 

F: VALID TERM OF CERTIFICATE 

G: NAME (ID) OF SAM 

H: PUBLIC KEY Kpu OF SAM 

I: PARAMETER INDICATING WHERE TO DEPEND ON ANOTHER SAM 

J: PRIVATE KEY Ksca OF AUTHENTICATION OFFICE 

K: SIGNATURE 

L: HASH FUNCTION 



19 




FIG. 42 

A: ID OF SAM 

B: REGISTRATION DENIAL FLAG 

C: STATUS FLAG 

D: CONDITION FLAG 

E: SIGNATURE 

FIG. 43 

A: START BACKUP OF STORAGE DATA OF SAM 

S121: SAM MUTUALLY AUTHENTICATES WITH IC CARD 

S122: GENERATE RANDOM NUMBER AS BACKUP KEY 

S123: ENCRYPT STORAGE DATA OF SAM BY USE OF BACKUP KEY 

S124: ENCRYPT BACKUP KEY BY USE OF PUBLIC KEY OF EMD SERVICE 

CENTER 

S125: STORE ENCRYPTED STORAGE DATA OF SAM AND ENCRYPTED 
BACKUP KEY IN IC CARD 
B: END 

FIG. 44 

A: START BACKUP OF STORAGE DATA OF SAM 

S131: SAM MUTUALLY AUTHENTICATES WITH IC CARD 

S132: ENCRYPT STORAGE DATA OF SAM BY USE OF PUBLIC KEY OF EMD 
SERVICE CENTER 

S133: STORE ENCRYPTED STORAGE DATA OF SAM IN IC CARD 
B : END 
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FIG. 45 

A: START PROCESSING FOR READING BACKUP INTO NEW RECEIVER 
S141: SAM MUTUALLY AUTHENTICATES WITH IC CARD 

S142: READ ENCRYPTED STORAGE DATA OF SAM AND ENCRYPTED BACKUP 
KEY FROM IC CARD 

S143 SAM MUTUALLY AUTHENTICATES WITH EMD SERVICE CENTER 
S144: SAM TRANSMITS ENCRYPTED STORAGE DATA OF SAM AND 
ENCRYPTED BACKUP KEY TO EMD SERVICE CENTER 
S145: EMD SERVICE CENTER DECRYPTS BACKUP KEY BY USE OF 
PRIVATE KEY 

S146: EMD SERVICE CENTER DECRYPTS STORAGE DATA OF SAM BY USE 
OF BACKUP KEY 

S147: EMD SERVICE CENTER ENCRYPTS STORAGE DATA OF SAM BY USE 
OF TEMPORARY KEY 

S148: EMD SERVICE CENTER TRANSMITS STORAGE DATA OF SAM 
S149: SAM DECRYPTS AND STORES RECEIVED DATA 

S150: EMD SERVICE CENTER MAKES ID OF OLD SAM UN - REG I STERABLE 
RETURN 

FIG. 46 

A: START PROCESSING FOR READING BACKUP INTO NEW RECEIVER 
S161: SAM MUTUALLY AUTHENTICATES WITH IC CARD 
S162: READ ENCRYPTED STORAGE DATA OF SAM FROM IC CARD 
SI 6 3 SAM MUTUALLY AUTHENTICATES WITH EMD SERVICE CENTER 
S164: SAM TRANSMITS ENCRYPTED STORAGE DATA OF SAM TO EMD 
SERVICE CENTER 

S165: EMD SERVICE CENTER DECRYPTS STORAGE DATA OF SAM BY USE 
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OF PRIVATE KEY 

S166: EMD SERVICE CENTER ENCRYPTS STORAGE DATA OF SAM BY USE 
OF TEMPORARY KEY 

S167: EMD SERVICE CENTER TRANSMITS STORAGE DATA OF SAM 
S168: SAM DECRYPTS AND STORES RECEIVED DATA 

S169: EMD SERVICE CENTER MAKES ID OF OLD SAM UN-REGISTERABLE 
RETURN 

FIG. 47 

A: START PROCESSING FOR REGISTERING RECORDER 

S181: RECEIVER ADDS ID OF RECORDER INTO REGISTRATION LIST 

S182: RECEIVER AND EMD SERVICE CENTER PERFORM MUTUAL 

AUTHENTICATION 

S183: IS RECEIVER UN-REGISTERABLE? 

S184: RECEIVER TRANSMITS TO EMD SERVICE CENTER VERSION OF „ 
DISTRIBUTION KEY OF RECEIVER, CHARGING INFORMATION, HANDLING 
POLICY, AND REGISTRATION LIST, WHICH HAVE BEEN ENCRYPTED BY 
USE OF TEMPORARY KEY 

S185: EMD SERVICE CENTER DECRYPTS RECEIVED DATA, PROCESSES 
CHARGING INFORMATION, AND UPDATES REGISTRATION LIST 
S186: IS DISTRIBUTION KEY OF RECEIVER NEWEST VERSION? 
S187: EMD SERVICE CENTER TRANSMITS REGISTRATION LIST AND 
CHARGING- INFORMATION RECEIPT MESSAGE ENCRYPTED BY USE OF 
TEMPORARY KEY, AND RECEIVER RECEIVES AND STORES REGISTRATION 
LIST AND CHARGING- INFORMATION RECEIPT MESSAGE 
S188: RECEIVER ERASES CHARGING INFORMATION AND UPDATES 
REGISTRATION LIST 
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S189: EMD SERVICE CENTER TRANSMITS REGISTRATION LIST , 
CHARGING- INFORMATION RECEIPT MESSAGE, AND DISTRIBUTION KEY 
ENCRYPTED BY USE OF TEMPORARY KEY, AND RECEIVER RECEIVES AND 
STORES REGISTRATION LIST, CHARGING- INFORMATION RECEIPT 
MESSAGE, AND DISTRIBUTION KEY 

S190: RECEIVER ERASES CHARGING INFORMATION AND UPDATES 
REGISTRATION LIST AND DISTRIBUTION KEY 
S191: IS RECORDER UN-REGISTERABLE? 

S192: RECEIVER AND RECORDER PERFORM MUTUAL AUTHENTICATION 

S193: RECEIVER TRANSMITS REGISTRATION COMPLETION MESSAGE AND 

DISTRIBUTION KEY ENCRYPTED BY USE OF TEMPORARY KEY, AND 

RECORDER RECEIVES AND DECRYPTS REGISTRATION COMPLETION 

MESSAGE AND DISTRIBUTION KEY 

S194: RECORDER UPDATES DISTRIBUTION KEY 

B : RETURN 

FIG. 48 

A: START PROCESSING OF RECEIVER FOR RECEIVING DISTRIBUTION 
KEY 

S201: RECEIVER MUTUALLY AUTHENTICATES WITH EMD SERVICE CENTER 
S202: RECEIVER TRANSMITS CERTIFICATE TO EMD SERVICE CENTER 
S203: IS RECEIVER UN-REGISTERABLE? 

S204: RECEIVER TRANSMITS TO EMD SERVICE CENTER VERSION OF 
DISTRIBUTION KEY, CHARGING INFORMATION, HANDLING POLICY, AND 
REGISTRATION LIST, WHICH HAVE BEEN ENCRYPTED BY USE OF 
TEMPORARY KEY 

S205: EMD SERVICE CENTER DECRYPTS RECEIVED DATA ,. AND . 
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PROCESSES CHARGING INFORMATION 

S206: IS DISTRIBUTION KEY NEWEST VERSION? 

S207: EMD SERVICE CENTER TRANSMITS REGISTRATION LIST AND 
CHARGING- INFORMATION RECEIPT MESSAGE ENCRYPTED BY USE OF 
TEMPORARY KEY, AND RECEIVER RECEIVES AND DECRYPTS 
REGISTRATION LIST AND CHARGING- INFORMATION RECEIPT MESSAGE 
S208: RECEIVER ERASES CHARGING INFORMATION AND UPDATES 
REGISTRATION LIST 

S209: EMD SERVICE CENTER TRANSMITS REGISTRATION LIST, 
CHARGING- INFORMATION RECEIPT MESSAGE, AND DISTRIBUTION KEY 
ENCRYPTED BY USE OF TEMPORARY KEY. AND RECEIVER RECEIVES AND 
DECRYPTS REGISTRATION LIST, CHARGING- INFORMATION RECEIPT 
MESSAGE, AND DISTRIBUTION KEY 

S210: RECEIVER ERASES CHARGING INFORMATION AND UPDATES 
REGISTRATION LIST AND DISTRIBUTION KEY 
B : RETURN 

FIG. 49 

A: START PROCESSING OF RECORDER FOR RECEIVING DISTRIBUTION 
KEY 

S221: RECEIVER AND RECORDER PERFORM MUTUAL AUTHENTICATION 
S222: IS RECORDER INCLUDED IN REGISTRATION LIST OF RECEIVER 
S223: IS RECORDER UN-REGISTERABLE? 

S224: RECORDER TRANSMITS TO RECEIVER VERSION OF DISTRIBUTION 
KEY AND CHARGING INFORMATION WHICH HAVE BEEN ENCRYPTED BY US] 
OF TEMPORARY KEY, AND RECEIVER RECEIVES AND DECRYPTS VERSION 
OF DISTRIBUTION KEY AND CHARGING INFORMATION 
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S225: RECEIVER AND EMD SERVICE CENTER PERFORM MUTUAL 
AUTHENTICATION 

S226: IS RECEIVER UN - REGI STERABLE ? 

S227: RECEIVER TRANSMITS TO EMD SERVICE CENTER VERSION OF 
DISTRIBUTION KEY, CHARGING INFORMATION, HANDLING POLICY, AND 
REGISTRATION LIST OF RECEIVER, AS WELL AS CHARGING 
INFORMATION OF RECORDER, WHICH HAVE BEEN ENCRYPTED BY USE OF 
TEMPORARY KEY 

S228: EMD SERVICE CENTER DECRYPTS RECEIVED DATA, AND 
PROCESSES CHARGING INFORMATION 

S229: IS DISTRIBUTION KEY OF RECEIVER NEWEST VERSION? 
S230: EMD SERVICE CENTER TRANSMITS REGISTRATION LIST AND 
CHARGING- INFORMATION RECEIPT MESSAGE ENCRYPTED BY USE OF 
TEMPORARY KEY, AND RECEIVER RECEIVES AND DECRYPTS 
REGISTRATION LIST AND CHARGING- INFORMATION RECEIPT MESSAGE 
S231: RECEIVER ERASES CHARGING INFORMATION AND UPDATES 
REGISTRATION LIST 

S232: EMD SERVICE CENTER TRANSMITS REGISTRATION LIST, 
CHARGING- INFORMATION RECEIPT MESSAGE, AND DISTRIBUTION KEY 
ENCRYPTED BY USE OF TEMPORARY KEY, AND RECEIVER RECEIVES AND 
DECRYPTS REGISTRATION LIST, CHARGING- INFORMATION RECEIPT 
MESSAGE, AND DISTRIBUTION KEY 

S233: RECEIVER ERASES CHARGING INFORMATION AND UPDATES 
REGISTRATION LIST AND DISTRIBUTION KEY 
S234: IS RECORDER UN -REGI STERABLE? 

S235: RECEIVER TRANSMITS CHARGING- INFORMATION RECEIPT MESSAGE 
AND DISTRIBUTION KEY ENCRYPTED BY USE OF TEMPORARY KEY, AND 
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RECORDER RECEIVES AND DECRYPTS CHARGING- INFORMATION RECEIPT 
MESSAGE AND DISTRIBUTION KEY 

S236: RECORDER ERASES CHARGING INFORMATION AND UPDATES 

DISTRIBUTION KEY 

S237: REGISTER RECORDER 

B: RETURN 

FIG. 50 

A: START PROCESSING FOR TRANSMITTING SECURE CONTAINER TO 
SERVICE PROVIDER 

S251: INSERT WATERMARK INTO CONTENT 
S252: COMPRESS CONTENT 

S253: GENERATE RANDOM NUMBER AS CONTENT KEY 

S254: ENCRYPT CONTENT BY USE OF CONTENT KEY 

S255: ENCRYPT CONTENT KEY BY USE OF DISTRIBUTION KEY 

S256: CREATE SIGNATURE 

S257: CREATE SECURE CONTAINER 

S258: MUTUALLY AUTHENTICATE WITH SERVICE PROVIDER 
S259: TRANSMIT SECURE CONTAINER 
B: RETURN 

FIG. 51 

A: START PROCESSING FOR TRANSMITTING SECURE CONTAINER TO 
SERVICE PROVIDER 

S271: INSERT WATERMARK INTO CONTENT 
S272: COMPRESS CONTENT 
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S273: GENERATE RANDOM NUMBER AS CONTENT KEY 

S274: ENCRYPT CONTENT BY USE OF CONTENT KEY 

S275: ENCRYPT CONTENT KEY AND HANDLING POLICY BY USE OF 

DISTRIBUTION KEY 

S276: CREATE SIGNATURE 

S277: CREATE SECURE CONTAINER 

S278: MUTUALLY AUTHENTICATE WITH SERVICE PROVIDER 
S279: TRANSMIT SECURE CONTAINER 
B : RETURN 

FIG. 52 

A: START PROCESSING FOR TRANSMITTING SECURE CONTAINER TO 
RECEIVER 

S291: EXTRACT PUBLIC KEY FROM CERTIFICATE OF SECURE CONTAINER 

S292: CONFIRM THAT SECURE CONTAINER HAS NOT BEEN TAMPERED 

S293: EXTRACT HANDLING POLICY FROM SECURE CONTAINER 

S294: PRODUCE PRICE INFORMATION 

S295: CREATE SECURE CONTAINER 

S296: MUTUALLY AUTHENTICATE WITH RECEIVER 

S299: TRANSMIT SECURE CONTAINER 

B : RETURN 

FIG. 53 

A: START PROCESSING FOR TRANSMITTING SECURE CONTAINER TO 
RECEIVER 

S311: EXTRACT PUBLIC KEY FROM CERTIFICATE OF SECURE CONTAINER 
S312: CONFIRM THAT SECURE CONTAINER HAS NOT BEEN TAMPERED 
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S313: DECRYPTS HANDLING POLICY OF SECURE CONTAINER BY USE OF 
DISTRIBUTION KEY 

S3 14: PRODUCE HANDLING CONTROL INFORMATION 

S315: PRODUCE PRICE INFORMATION 

S316: CREATE SECURE CONTAINER 

S317: MUTUALLY AUTHENTICATE WITH RECEIVER 

S3 18: TRANSMIT SECURE CONTAINER 

B: RETURN 

FIG - 54 

A: START CHARGING PROCESSING 

S331: CAN CONTENT KEY BE DECRYPTED BY USE OF DISTRIBUTION 
KEY? 

S332: PROCESSING FOR RECEIVING DISTRIBUTION KEY 

S333: DECRYPTS CONTENT KEY BY USE OF DISTRIBUTION KEY? 

S334: PRODUCE CHARGING INFORMATION AND CONDITIONS-FOR-USE .... 

FROM HANDLING POLICY AND PRICE INFORMATION 

S335: IS TOTAL OF CHARGES UPPER LIMIT? 

S336: PROCESSING FOR RECEIVING DISTRIBUTION KEY 

S337: STORE CHARGING INFORMATION IN SAM 

S338: RECORD CONDITIONS-FOR-USE INFORMATION IN HDD 

S339: RECORD HANDLING POLICY IN HDD 

S340: CALCULATE HASH VALUE OF CONDITIONS-FOR-USE INFORMATION 
S34l: STORE HASH VALUE OF CONDITIONS-FOR-USE INFORMATION IN 
SAM 

S34 2: GENERATE RANDOM NUMBER AS SAVE KEY 
S343: ENCRYPT CONTENT KEY BY USE OF SAVE KEY 



28 




S344: RECORD CONTENT KEY IN HDD 
S345: STORE SAVE KEY IN SAM 
B : RETURN 

FIG. 55 

A: START REPRODUCTION PROCESSING 

S361: READ CONDITIONS-FOR-USE INFORMATION AND CONTENT KEY 
FROM HDD 

S362: CALCULATE HASH VALUE OF CONDITIONS-FOR-USE INFORMATION 
S363: COINCIDE WITH HASH VALUE WITHIN SAM? 
S364: UPDATE CONDITIONS-FOR-USE INFORMATION 

S365: CALCULATE HASH VALUE OF CONDITIONS-FOR-USE INFORMATION 
S366: STORE HASH VALUE IN SAM 

S367: STORE CONDITIONS-FOR-USE INFORMATION IN HDD 

S368: SAM AND EXTENSION SECTION PERFORM MUTUAL AUTHENTICATION 

AND SHARE TEMPORARY KEY 

S369: DECRYPT CONTENT KEY BY USE OF SAVE KEY 

S370: ENCRYPT CONTENT KEY BY USE OF TEMPORARY KEY 

S371: TRANSMIT CONTENT KEY TO EXTENSION SECTION 

S372: DECRYPT CONTENT KEY BY USE OF TEMPORARY KEY 

S373: TRANSMIT CONTENT TO EXTENSION SECTION 

S374: DECRYPT CONTENT BY USE OF CONTENT KEY 

S375: EXTEND CONTENT 

S376: ADD WATERMARK TO CONTENT 

S37 7: OUTPUT CONTENT 

S378: ERROR PROCESSING 

B : RETURN 
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FIG. 56 

A: START REPRODUCTION PROCESSING 

S391: READ CONDITIONS-FOR-USE INFORMATION AND CONTENT KEY 
FROM HDD 

S392: CALCULATE HASH VALUE OF CONDITIONS-FOR-USE INFORMATION 
S393: COINCIDE WITH HASH VALUE WITHIN SAM? 
S394: UPDATE CONDITIONS-FOR-USE INFORMATION 

S395: CALCULATE HASH VALUE OF CONDITIONS-FOR-USE INFORMATION 
S39 6: STORE HASH VALUE IN SAM 

S397: STORE CONDITIONS-FOR-USE INFORMATION IN HDD 

S398: SAM AND DECODER PERFORM MUTUAL AUTHENTICATION AND SHARE 

TEMPORARY KEY 

S399: DECRYPT CONTENT KEY BY USE OF SAVE KEY 

S400: ENCRYPT CONTENT KEY BY USE OF TEMPORARY KEY 

S401: TRANSMIT CONTENT KEY TO DECODER 

S402: DECRYPT CONTENT KEY BY USE OF TEMPORARY KEY 

S403: TRANSMIT CONTENT TO DECODER 

S404: DECRYPT CONTENT BY USE OF CONTENT KEY 

S405: EXTEND CONTENT 

S406: ADD WATERMARK TO CONTENT 

S407: OUTPUT CONTENT 

S408: ERROR PROCESSING 

B: RETURN 

FIG. 57 

A: START PROCESSING FOR PRODUCING SETTLEMENT OBJECTS 
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S421: SELECT CHARGING INFORMATION REGARDING USE OF CERTAIN 
CONTENT 

S422: DOES CHARGING INFORMATION INCLUDE PROFIT DISTRIBUTION 

TO CONTENT PROVIDER AND SERVICE PROVIDER? 

S423: CALCULATE AMOUNT WHICH USER MUST PAY TO SERVICE 

PROVIDER WITH REFERENCE TO PROFIT DISTRIBUTION OF CHARGING 

INFORMATION 

S424: CALCULATE AMOUNT WHICH SERVICE PROVIDER MUST PAY TO 
CONTENT PROVIDER WITH REFERENCE TO PROFIT DISTRIBUTION OF 
CHARGING INFORMATION 

S425: CALCULATE AMOUNT WHICH CONTENT PROVIDER MUST PAY TO 
PROPRIETARY ORGANIZATION WITH REFERENCE TO PROFIT 
DISTRIBUTION OF CHARGING INFORMATION 

S426: CALCULATE AMOUNT WHICH USER MUST PAY TO SERVICE 
PROVIDER WITH REFERENCE TO PROFIT-DISTRIBUTION DATA BASE 
S427: CALCULATE AMOUNT WHICH SERVICE PROVIDER MUST PAY TO 
CONTENT PROVIDER WITH REFERENCE TO PROFIT-DISTRIBUTION DATA 
BASE 

S428: CALCULATE AMOUNT WHICH CONTENT PROVIDER MUST PAY TO 
PROPRIETARY ORGANIZATION WITH REFERENCE TO PROFIT- 
DISTRIBUTION DATA BASE 

S429: CORRECT INDIVIDUAL PAYMENT AMOUNTS WITH REFERENCE TO 
DISCOUNT INFORMATION DATA BASE 

S430: HAS CALCULATION BEEN PERFORMED FOR ALL CONTENTS? 
S431: CALCULATE AMOUNT WHICH USER MUST PAY TO EACH SERVICE 
PROVIDER AND PRODUCE SETTLEMENT OBJECT 1 

S432: CALCULATE AMOUNT WHICH EACH SERVICE PROVIDER MUST PAY 
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TO EACH CONTENT PROVIDER AND PRODUCE SETTLEMENT OBJECT 2 
S433: CALCULATE AMOUNT WHICH EACH CONTENT PROVIDER MUST PAY 
TO PROPRIETARY ORGANIZATION AND PRODUCE SETTLEMENT OBJECT 3 
S434: DETERMINE AMOUNT TO BE COLLECTED FROM USER, WITH 
REFERENCE TO SERVICE CHARGE OF EMD SERVICE CENTER AND PRODUCE 
SETTLEMENT OBJECT 4 
B : END 



FIG. 58 
A: 

CREDIT SETTLEMENT 
OBJECT 1 

PAYER: ID OF USER 

COLLECTION AMOUNT: x 

RECEIVER: ID OF SERVICE PROVIDER 

PAYMENT AMOUNT: xl 

B: 

CREDIT SETTLEMENT 
OBJECT 2 

PAYER: CREDIT SETTLEMENT OBJECT 1 

COLLECTION AMOUNT: - 

RECEIVER: ID OF CONTENT PROVIDER 

PAYMENT AMOUNT: x2 

C : 

CREDIT SETTLEMENT 
OBJECT 3 

PAYER: CREDIT SETTLEMENT OBJECT 1 
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COLLECTION AMOUNT: - 

RECEIVER: ID OF PROPRIETARY ORGANIZATION 
PAYMENT AMOUNT: x3 
D : 

CREDIT SETTLEMENT 
OBJECT 4 

PAYER: CREDIT SETTLEMENT OBJECT 1 
COLLECTION AMOUNT: - 

RECEIVER: ID OF EMD SERVICE CENTER 
PAYMENT AMOUNT: x4 

FIG. 59 
A: 

BANK SETTLEMENT 
OBJECT 1 

PAYER: ID OF SERVICE PROVIDER 
COLLECTION AMOUNT: yl 

RECEIVER: ID OF EMD SERVICE CENTER 

PAYMENT AMOUNT: yl 

B: 

BANK SETTLEMENT 
OBJECT 2 

PAYER: ID OF CONTENT PROVIDER 

COLLECTION AMOUNT: y2 

RECEIVER: ID OF EMD SERVICE CENTER 

PAYMENT AMOUNT: y2 

C: 
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BANK SETTLEMENT 
OBJECT 3 

PAYER: ID OF PROPRIETARY ORGANIZATION 
COLLECTION AMOUNT: y3 

RECEIVER: ID OF EMD SERVICE CENTER 
PAYMENT AMOUNT: y3 

FIG. 60 
A: 

CREDIT SETTLEMENT 
OBJECT 1 

PAYER: ID OF USER 

COLLECTION AMOUNT: x 

RECEIVER: ID OF SERVICE PROVIDER 

PAYMENT AMOUNT: xl 

B: 

BANK SETTLEMENT 
OBJECT 2 

PAYER: ID OF SERVICE PROVIDER 
COLLECTION AMOUNT: x2 + x3 
RECEIVER: ID OF CONTENT PROVIDER 
PAYMENT AMOUNT: x2 + x3 
C: 

BANK SETTLEMENT 
OBJECT 3 

PAYER: ID OF CONTENT PROVIDER 
COLLECTION AMOUNT: x3 
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RECEIVER: ID OF PROPRIETARY ORGANIZATION 
PAYMENT AMOUNT: x3 
D : 

CREDIT SETTLEMENT 
OBJECT 4 

PAYER: CREDIT SETTLEMENT OBJECT 1 
COLLECTION AMOUNT: - 

RECEIVER: ID OF EMD SERVICE CENTER 
PAYMENT AMOUNT: x4 

FIG. 61 

A: START CREDIT SETTLEMENT PROCESSING 

S451: OBTAIN SETTLEMENT INSTITUTE OF RECEIVER FROM RECEIVER 
ID 

S452: OBTAIN SETTLEMENT INSTITUTE OF PAYER FROM PAYER ID 
S453: IS CREDIT-CHECK PROCESSING NECESSARY? 
S454: EXECUTE CREDIT-CHECK PROCESSING 

S455: HAS PREVIOUSLY-EXECUTED SETTLEMENT OBJECT PROCESSING 
ENDED? 

S456: TRANSMIT SETTLEMENT INSTRUCTIONS TO SETTLEMENT 
INSTITUTES 

S457: TRANSMIT SETTLEMENT INFORMATION TO RECEIVER 
S458: TRANSMIT SETTLEMENT INFORMATION TO PAYER 
S459: EXECUTE ERROR PROCESSING FOR INCOMPLETE SETTLEMENT 
B: END 

FIG. 62 
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A: START BANK SETTLEMENT PROCESSING 

S471: OBTAIN SETTLEMENT INSTITUTE OF RECEIVER FROM RECEIVER 
ID 

S472: OBTAIN SETTLEMENT INSTITUTE OF PAYER FROM PAYER ID 
S473: HAS PREVIOUSLY -EXECUTED SETTLEMENT OBJECT PROCESSING 
ENDED? 

S47 4: TRANSMIT SETTLEMENT INSTRUCTIONS TO SETTLEMENT 
INSTITUTES 

S475: TRANSMIT SETTLEMENT INFORMATION TO RECEIVER 
S476: TRANSMIT SETTLEMENT INFORMATION TO PAYER 
S477: EXECUTE ERROR PROCESSING FOR INCOMPLETE SETTLEMENT 
B : END 

***** 
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